CVE-2011-1307: IBM WebSphere Application Server

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

The installer in IBM WebSphere Application Server (WAS) before 7.0.0.15 uses 777 permissions for a temporary log directory, which allows local users to have unintended access to log files via standard filesystem operations, a different vulnerability than CVE-2009-1173.

Affected products

• IBM WebSphere Application Server: up to and including 7.0.0.13; version 2.0 only; version 3.0 only; version 3.0.2 only; version 3.0.2.1 only; version 3.0.2.2 only; …

Published 2011-03-08. Last modified 2026-06-16.