CVE-2016-0380

Published: Aug 8, 2016Modified: May 6, 2026

3.3

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 1.8 / Impact: 1.4

Source: NVD

Description

IBM Sterling Connect:Direct for Unix 4.1.0 before 4.1.0.4 iFix073 and 4.2.0 before 4.2.0.4 iFix003 uses default file permissions of 0664, which allows local users to obtain sensitive information via standard filesystem operations.

Affected (10)

Products: Ibm: Sterling Connect\

Ibm

1 product

Sterling Connect\

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Ibm Sterling Connect\	Version direct 4.1.0.0
Ibm Sterling Connect\	Version direct 4.1.0.1
Ibm Sterling Connect\	Version direct 4.1.0.2
Ibm Sterling Connect\	Version direct 4.1.0.3
Ibm Sterling Connect\	Version direct 4.1.0.4
Ibm Sterling Connect\	Version direct 4.2.0.0
Ibm Sterling Connect\	Version direct 4.2.0.1
Ibm Sterling Connect\	Version direct 4.2.0.2
Ibm Sterling Connect\	Version direct 4.2.0.3
Ibm Sterling Connect\	Version direct 4.2.0.4