CVE-2009-1173: IBM WebSphere Application Server

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.3 uses weak permissions (777) for files associated with unspecified "interim fixes," which allows attackers to modify files that would not have been accessible if the intended 755 permissions were used.

Affected products

• IBM WebSphere Application Server: version 7.0 only; version 7.0.0.1 only

Published 2009-03-31. Last modified 2026-06-16.