EUVD-2017-10398

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

IBM WebSphere Application Server may create files with default permissions, risking unauthorized access.

Reporter	Title	Published	Views	Family All 45
IBM Security Bulletins	Multiple vulnerabilities have been identified in WebSphere Application Server shipped with WebSphere Service Registry and Repository (CVE-2017-1380, CVE-2017-1381, CVE-2017-1382, CVE-2017-1501)	15 Jun 201807:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Content Collector for Email affected by vulnerability due to WebSphere Application Server having insecure permissions when custom start up scripts are used	17 Jun 201812:18	–	ibm
IBM Security Bulletins	Security Bulletins for Emptoris Program Management	8 Dec 201816:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities affect IBM WebSphere Application Server for Bluemix	15 Jun 201807:08	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Business Process Manager, WebSphere Process Server, WebSphere Enterprise Service Bus, and WebSphere Lombardi Edition (CVE-2017-1382)	15 Jun 201807:07	–	ibm
IBM Security Bulletins	Security Bulletin: A Security vulnerability has been identified in IBM WebSphere Application Server bundled with IBM WebSphere Application Server Patterns and IBM WebSphere Application Server for Cloud (CVE-2017-1382)	15 Jun 201807:07	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager (CVE-2017-1382)	29 Sep 201820:24	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM Websphere Application Server shipped with IBM Security/Tivoli Directory Server (CVE-2017-1382)	16 Jun 201822:03	–	ibm
IBM Security Bulletins	Security Bulletins for Emptoris Spend Analysis	8 Dec 201815:10	–	ibm
IBM Security Bulletins	Security Bulletins for Emptoris Contract Management	8 Dec 201816:15	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "2adc4cbc-83ce-3be9-9c21-d022e8f671df",
        "vendor": {
          "name": "IBM"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "0ccfc401-4cc3-3709-a30e-02d4852cb6fd",
        "product": {
          "name": "WebSphere Application Server"
        },
        "product_version": "8.5"
      },
      {
        "id": "0e7e4d0d-edc6-3391-b1ef-8795c09b0786",
        "product": {
          "name": "WebSphere Application Server"
        },
        "product_version": "7.0"
      },
      {
        "id": "a3bc1e25-ef2f-3b11-9c16-1840e984b39d",
        "product": {
          "name": "WebSphere Application Server"
        },
        "product_version": "9.0"
      },
      {
        "id": "bb6d027e-6112-373c-8c09-ce1cf508d83d",
        "product": {
          "name": "WebSphere Application Server"
        },
        "product_version": "8.0"
      }
    ]
  }
]

Source	Link
securitytracker	www.securitytracker.com/id/1038977
ibm	www.ibm.com/support/docview.wss
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/127153
securityfocus	www.securityfocus.com/bid/99960
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

7High risk

Vulners AI Score7

CVSS 37.1

CVSS 23.6

EPSS0.00373