IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 might create files using the default permissions instead of the customized permissions when custom startup scripts are used. A local attacker could exploit this to gain access to files with an unknown impact. IBM X-Force ID: 127153.
| Software | From | Fixed in |
|---|---|---|
| ibm / websphere_application_server | 7.0.0.0 | 7.0.0.43.x |
| ibm / websphere_application_server | 8.0.0.0 | 8.0.0.13.x |
| ibm / websphere_application_server | 8.5.0.0 | 8.5.5.12.x |
| ibm / websphere_application_server | 9.0.0.0 | 9.0.0.4.x |