Description
The System Management/Repository component in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.5 on z/OS uses weak file permissions for new applications, which allows remote attackers to obtain sensitive information via unspecified vectors.
References
- 36157 vdb-entry
- 34461 third-party-advisory
- was-zos-information-disclosure(52083) vdb-entry
- http://www-01.ibm.com/support/docview.wss?uid=swg27014463
- PK83308 vendor-advisory