Servers and applications
CVE-2009-1173
IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.3 uses weak permissions (777) for files associated with unspecified "interim fixes," which allows attackers to modify files that would not have been accessible if the intended 755 permissions were used.
- Severity
- Low 2.1
- Published
- 31 Mar 2009
- Last changed
- 16 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Exploit chance
- 0.3% in the next 30 daysHigher than 28% of CVEs. EPSS by FIRST, 12 Nov 2026
- Weakness
- CWE-264
- Attack
- Needs local access · No login needed
- Attacker can
- Change some data
- CVSS vector
AV:L/AC:L/Au:N/C:N/I:P/A:N- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
IBM WebSphere Application ServerServers and applications · cpe:a:ibm:websphere_application_server |
|