CVE-2017-1699

Published: Jan 4, 2018Modified: Nov 21, 2024

3.3

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Exploitability: 1.8 / Impact: 1.4

Source: NVD

Description

IBM MQ Managed File Transfer Agent 8.0 and 9.0 sets insecure permissions on certain files it creates. A local attacker could exploit this vulnerability to modify or delete data contained in the files with an unknown impact. IBM X-Force ID: 134391.

Affected (12)

Products: Ibm: Websphere Mq

Ibm

1 product

Websphere Mq

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Mq	Version 8.0.0.1
Ibm Websphere Mq	Version 8.0.0.2
Ibm Websphere Mq	Version 8.0.0.3
Ibm Websphere Mq	Version 8.0.0.4
Ibm Websphere Mq	Version 8.0.0.5
Ibm Websphere Mq	Version 8.0.0.6
Ibm Websphere Mq	Version 8.0
Ibm Websphere Mq	Version 9.0.0.1
Ibm Websphere Mq	Version 9.0.1
Ibm Websphere Mq	Version 9.0.2
Ibm Websphere Mq	Version 9.0.3
Ibm Websphere Mq	Version 9.0