« Volver al listado

CVE-2016-0380

Estado: ModificadaBaja (3.3)—

IBM Sterling Connect:Direct for Unix 4.1.0 before 4.1.0.4 iFix073 and 4.2.0 before 4.2.0.4 iFix003 uses default file permissions of 0664, which allows local users to obtain sensitive information via standard filesystem operations.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

IBM — Sterling Connect\

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2016-0380",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 3.3,
          "attackVector": "LOCAL",
          "baseSeverity": "LOW",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2016-08-08T01:59:05.633",
  "references": [
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IT14769",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21988278",
      "tags": [
        "Mitigation",
        "Patch",
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/92336",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IT14769",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21988278",
      "tags": [
        "Mitigation",
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/92336",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM Sterling Connect:Direct for Unix 4.1.0 before 4.1.0.4 iFix073 and 4.2.0 before 4.2.0.4 iFix003 uses default file permissions of 0664, which allows local users to obtain sensitive information via standard filesystem operations."
    },
    {
      "lang": "es",
      "value": "IBM Sterling Connect:Direct para Unix 4.1.0 en versiones anteriores a 4.1.0.4 iFix073 y 4.2.0 en versiones anteriores a 4.2.0.4 iFix003 utiliza permisos de archivo predeterminado de 0664, lo que permite a usuarios locales obtener información sensible a través de operaciones estándares de sistema de archivos."
    }
  ],
  "lastModified": "2026-06-17T00:37:25.940",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:sterling_connect\\:direct:4.1.0.0:*:*:*:*:unix:*:*",
              "vulnerable": true,
              "matchCriteriaId": "015B9524-6932-4834-A3BB-985BB04C2FC3"
            },
            {
              "criteria": "cpe:2.3:a:ibm:sterling_connect\\:direct:4.1.0.1:*:*:*:*:unix:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4959E4CB-F87B-44CE-8FD2-F336DB1F4998"
            },
            {
              "criteria": "cpe:2.3:a:ibm:sterling_connect\\:direct:4.1.0.2:*:*:*:*:unix:*:*",
              "vulnerable": true,
              "matchCriteriaId": "31CA7220-2523-4EDC-A98A-EA9DADE78EE6"
            },
            {
              "criteria": "cpe:2.3:a:ibm:sterling_connect\\:direct:4.1.0.3:*:*:*:*:unix:*:*",
              "vulnerable": true,
              "matchCriteriaId": "166AA44D-1243-4F14-BF41-CD125D234AC2"
            },
            {
              "criteria": "cpe:2.3:a:ibm:sterling_connect\\:direct:4.1.0.4:*:*:*:*:unix:*:*",
              "vulnerable": true,
              "matchCriteriaId": "281C2BEF-3C83-45C6-83EE-B5EE2B1BE817"
            },
            {
              "criteria": "cpe:2.3:a:ibm:sterling_connect\\:direct:4.2.0.0:*:*:*:*:unix:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B6EE8089-7D2A-479D-9DE4-0E0DAC8F2540"
            },
            {
              "criteria": "cpe:2.3:a:ibm:sterling_connect\\:direct:4.2.0.1:*:*:*:*:unix:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C7AE27EC-ED46-4B3F-9E4F-13FCA9A4E00E"
            },
            {
              "criteria": "cpe:2.3:a:ibm:sterling_connect\\:direct:4.2.0.2:*:*:*:*:unix:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CE00C5BB-3466-41AC-87DB-09C8E081643D"
            },
            {
              "criteria": "cpe:2.3:a:ibm:sterling_connect\\:direct:4.2.0.3:*:*:*:*:unix:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BD011827-8FE3-4C5C-9653-64FA90210B27"
            },
            {
              "criteria": "cpe:2.3:a:ibm:sterling_connect\\:direct:4.2.0.4:*:*:*:*:unix:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B9A75F26-B8CB-4EEB-A4B0-F11A9E48B1AD"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}