Description
IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.3 uses weak permissions (777) for files associated with unspecified "interim fixes," which allows attackers to modify files that would not have been accessible if the intended 755 permissions were used.
References
- ADV-2009-0854 vdb-entry
- 34259 vdb-entry
- 34131 third-party-advisory
- 34461 third-party-advisory
- PK77590 vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg27014463
- PK82988 vendor-advisory