{ "schema_version": "1.4.0", "id": "GHSA-jq5v-whhp-4f84", "modified": "2022-05-13T01:43:16Z", "published": "2022-05-13T01:43:16Z", "aliases": [ "CVE-2017-1382" ], "details": "IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 might create files using the default permissions instead of the customized permissions when custom startup scripts are used. A local attacker could exploit this to gain access to files with an unknown impact. IBM X-Force ID: 127153.", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" } ], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-1382" }, { "type": "WEB", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/127153" }, { "type": "WEB", "url": "http://www.ibm.com/support/docview.wss?uid=swg22004785" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/99960" }, { "type": "WEB", "url": "http://www.securitytracker.com/id/1038977" } ], "database_specific": { "cwe_ids": [ "CWE-276" ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2017-07-24T21:29:00Z" } }