Description
IBM WebSphere Application Server (WAS) Liberty Profile 8.5 before 8.5.5.1 uses weak permissions for unspecified files, which allows local users to obtain sensitive information via standard filesystem operations.
References
- PM90472 vendor-advisory
- http://www-01.ibm.com/support/docview.wss?&uid=swg21651880
- was-cve20134006-liberty-perm(85273) vdb-entry