4.0
Medium
CVE-2017-1418 IBM Integration Bus 9.0.0.0, 9.0.0.11, 10.0.0.0, and 10.0.0.14 (including IBM WebSphere Message Broker 8.0.0.0 and…
Description
IBM Integration Bus 9.0.0.0, 9.0.0.11, 10.0.0.0, and 10.0.0.14 (including IBM WebSphere Message Broker 8.0.0.0 and 8.0.0.9) has insecure permissions on certain files. A local attacker could exploit this vulnerability to modify or delete these files with an unknown impact. IBM X-Force ID: 127406.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Integration Bus 10.0 | 10.0.0.0 → 10.0.0.14 | No fix stated |
| Integration Bus 9.0 | 9.0.0.0 → 9.0.0.11 | No fix stated |
| WebSphere Message Broker 8.0 | 8.0.0.0 → 8.0.0.9 | No fix stated |
Other CVEs of Integration Bus
The 10 CVEs of Integration Bus →
CVE-2025-36014
IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.5 is vulnerable to code injection by a privileged user with…
8.2
High
CVE-2024-22356
IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.9.0 and IBM Integration Bus for z/OS 10.1…
4.9
Medium
CVE-2023-45176
IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.10.0 and IBM Integration Bus 10.1 through…
6.2
Medium
CVE-2018-1801
IBM App Connect V11.0.0.0 through V11.0.0.1, IBM Integration Bus V10.0.0.0 through V10.0.0.13, IBM Integration Bus…
5.3
Medium