CVE-2009-0436: IBM WebSphere Application Server

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

The (1) mod_ibm_ssl and (2) mod_cgid modules in IBM HTTP Server 6.0.x before 6.0.2.31 and 6.1.x before 6.1.0.19, as used in WebSphere Application Server (WAS), set incorrect permissions for AF_UNIX sockets, which has unknown impact and local attack vectors.

Affected products

• IBM WebSphere Application Server: version 6.0 only; version 6.0.0.1 only; version 6.0.0.2 only; version 6.0.0.3 only; version 6.0.1 only; version 6.0.1.1 only; …

Published 2009-02-10. Last modified 2026-06-16.