7.4
High
CVE-2018-1386 IBM Tivoli Workload Automation for AIX (IBM Workload Scheduler 8.6, 9.1, 9.2, 9.3, and 9.4) contains directories with…
Description
IBM Tivoli Workload Automation for AIX (IBM Workload Scheduler 8.6, 9.1, 9.2, 9.3, and 9.4) contains directories with improper permissions that could allow a local user to with special access to gain root privileges. IBM X-Force ID: 138208.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Workload Scheduler | 9.4 | No fix stated |
| Workload Scheduler | 9.3 | No fix stated |
| Workload Scheduler | 9.2 | No fix stated |
| Workload Scheduler | 9.1 | No fix stated |
| Workload Scheduler | 8.6 | No fix stated |
Other CVEs of Workload Scheduler
The 6 CVEs of Workload Scheduler →
CVE-2024-49351
IBM Workload Scheduler 9.5, 10.1, and 10.2 stores user credentials in plain text which can be read by a local user
5.5
Medium
CVE-2022-22369
IBM Workload Scheduler 9.4 and 9.5 could allow a local user to overwrite key system files which would cause the system…
6.2
Medium
CVE-2021-20349
IBM Tivoli Workload Scheduler 9.4 and 9.5 is vulnerable to a stack-based buffer overflow, caused by improper bounds…
5.9
Medium
CVE-2020-4380
IBM Workload Scheduler 9.3.0.4 is vulnerable to cross-site scripting
5.4
Medium