Security Bulletin: OpenSSL command line utility in IBM Workload Scheduler can run with elevated priviliges (CVE-2017-1716)

Summary OpenSSL command line utility in IBM Workload Scheduler has SUID permissions and can run with elevated priviliges Vulnerability Details OpenSSL command line utility in IBM Workload Scheduler, installed in TWS installation directory/TWS/bin/openssl, is installed with SUID permssion, as show...

CVE-2017-1716

IBM Tivoli Workload Scheduler 8.6.0, 9.1.0, and 9.2.0 could disclose sensitive information to a local attacker due to improper permission settings. IBM X-Force ID: 134638...

CVE-2017-1716

The IBM Tivoli Workload Scheduler openSSL binary (in TWS/bin/openssl) is installed with SUID, enabling local privilege elevation and access to TWS configuration files. Affected: Tivoli Workload Scheduler Distributed 8.6.0 FP04 and earlier; 9.1.0 FP02 and earlier; 9.2.0 FP02 and earlier. Root caus...