CVE-2018-1386

Опубликовано: 14 мар. 2018

Источник: nvd

CVSS3: 7.4

CVSS3: 7.8

CVSS2: 6.9

EPSS Низкий

Описание

IBM Tivoli Workload Automation for AIX (IBM Workload Scheduler 8.6, 9.1, 9.2, 9.3, and 9.4) contains directories with improper permissions that could allow a local user to with special access to gain root privileges. IBM X-Force ID: 138208.

Ссылки

http://www.ibm.com/support/docview.wss?uid=swg22012171
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/138208
VDB Entry
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22012171
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/138208
VDB Entry
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:tivoli_workload_scheduler:8.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_workload_scheduler:9.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_workload_scheduler:9.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_workload_scheduler:9.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_workload_scheduler:9.4:*:*:*:*:*:*:*

EPSS

Процентиль: 7%

0.00026

Низкий

7.4 High

CVSS3

7.8 High

CVSS3

6.9 Medium

CVSS2

Дефекты

CWE-732

Связанные уязвимости

GHSA-v28q-gjcq-62wp

CVSS3: 7

github

больше 3 лет назад

EPSS

Процентиль: 7%

0.00026

Низкий

7.4 High

CVSS3

7.8 High

CVSS3

6.9 Medium

CVSS2

Дефекты

CWE-732