CVE-2017-1382

🗓️ 24 Jul 2017 21:00:00Reported by ibmType

IBM WebSphere App Server 7.0/8.0/8.5/9.0, files created with default permissions may lead to unauthorized acces

Reporter	Title	Published	Views	Family All 45
IBM Security Bulletins	Multiple vulnerabilities have been identified in WebSphere Application Server shipped with WebSphere Service Registry and Repository (CVE-2017-1380, CVE-2017-1381, CVE-2017-1382, CVE-2017-1501)	15 Jun 201807:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Content Collector for Email affected by vulnerability due to WebSphere Application Server having insecure permissions when custom start up scripts are used	17 Jun 201812:18	–	ibm
IBM Security Bulletins	Security Bulletins for Emptoris Program Management	8 Dec 201816:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities affect IBM WebSphere Application Server for Bluemix	15 Jun 201807:08	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Business Process Manager, WebSphere Process Server, WebSphere Enterprise Service Bus, and WebSphere Lombardi Edition (CVE-2017-1382)	15 Jun 201807:07	–	ibm
IBM Security Bulletins	Security Bulletin: A Security vulnerability has been identified in IBM WebSphere Application Server bundled with IBM WebSphere Application Server Patterns and IBM WebSphere Application Server for Cloud (CVE-2017-1382)	15 Jun 201807:07	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager (CVE-2017-1382)	29 Sep 201820:24	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM Websphere Application Server shipped with IBM Security/Tivoli Directory Server (CVE-2017-1382)	16 Jun 201822:03	–	ibm
IBM Security Bulletins	Security Bulletins for Emptoris Spend Analysis	8 Dec 201815:10	–	ibm
IBM Security Bulletins	Security Bulletins for Emptoris Contract Management	8 Dec 201816:15	–	ibm

NVD

Vulners

Node

ibm websphere_application_serverRange7.0.0.0–7.0.0.43

ibm websphere_application_serverRange8.0.0.0–8.0.0.13

ibm websphere_application_serverRange8.5.0.0–8.5.5.12

ibm websphere_application_serverRange9.0.0.0–9.0.0.4

[
  {
    "product": "WebSphere Application Server",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.0"
      },
      {
        "status": "affected",
        "version": "8.0"
      },
      {
        "status": "affected",
        "version": "8.5"
      },
      {
        "status": "affected",
        "version": "9.0"
      }
    ]
  }
]

Source	Link
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/127153
securityfocus	www.securityfocus.com/bid/99960
ibm	www.ibm.com/support/docview.wss
securitytracker	www.securitytracker.com/id/1038977

13 May 2026 00:24Current

6.9Medium risk

Vulners AI Score6.9

CVSS 23.6

CVSS 37.1

EPSS0.00039

CWE-276