Skip to main content

Integration Bus CVE-2016-0394

LOW
Permission Issues (CWE-275)
2017-02-01 psirt@us.ibm.com
3.3
CVSS 3.0 · NVD

Severity by source

NVD PRIMARY
3.3 LOW
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
None

Lifecycle Timeline

1
CVE Published
Feb 01, 2017 - 20:59 cve.org
LOW 3.3

DescriptionCVE.org

IBM Integration Bus and WebSphere Message broker sets incorrect permissions for an object that could allow a local attacker to manipulate certain files.

AnalysisAI

IBM Integration Bus and WebSphere Message broker sets incorrect permissions for an object that could allow a local attacker to manipulate certain files. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-275. IBM Integration Bus and WebSphere Message broker sets incorrect permissions for an object that could allow a local attacker to manipulate certain files. Affected products include: Ibm Integration Bus, Ibm Websphere Message Broker.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2016-9706 CRITICAL
9.1 Feb 15

IBM Integration Bus 9.0 and 10.0 and WebSphere Message Broker SOAP FLOWS is vulnerable to a denial of service, caused by

CVE-2025-36014 HIGH
8.2 Jul 07

IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.5 is vulnerable to code injection by a privileged user with access

CVE-2017-1694 HIGH
8.1 Dec 20

IBM Integration Bus 9.0 and 10.0 transmits user credentials in plain in clear text which can be read by an attacker usin

CVE-2024-27265 MEDIUM
6.5 Mar 14

IBM Integration Bus for z/OS 10.1 through 10.1.0.3 is vulnerable to cross-site request forgery which could allow an atta

CVE-2024-22332 MEDIUM
6.5 Feb 09

The IBM Integration Bus for z/OS 10.1 through 10.1.0.2 AdminAPI is vulnerable to a denial of service due to file system

CVE-2016-9010 MEDIUM
6.1 Feb 15

IBM WebSphere Message Broker 9.0 and 10.0 could allow a remote attacker to hijack the clicking action of the victim. Rat

CVE-2016-8918 MEDIUM
5.9 Feb 01

IBM Integration Bus, under non default configurations, could allow a remote user to authenticate without providing valid

CVE-2017-1207 MEDIUM
5.5 Jul 05

IBM WebSphere Message Broker stores user credentials in plain in clear text which can be read by a local user. Rated med

CVE-2023-45176 MEDIUM
5.5 Oct 14

IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.10.0 and IBM Integration Bus 10.1 through 1

CVE-2015-7399 MEDIUM
5.3 Jan 11

IBM WebSphere Message Broker 7 before 7.0.0.8 and 8 before 8.0.0.6 and IBM Integration Bus 9 before 9.0.0.3 and 10 befor

CVE-2017-1126 MEDIUM
5.3 Oct 04

IBM WebSphere Message Broker (IBM Integration Bus 9.0 and 10.0) could allow an unauthorized user to obtain sensitive inf

CVE-2016-2961 MEDIUM
5.3 Jul 02

The integration server in IBM Integration Bus 9 before 9.0.0.6 and 10 before 10.0.0.5 and WebSphere Message Broker 8 bef

Share

CVE-2016-0394 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy