CVE-2016-0380

3.3 lowEPSS 0.3%

IBM Sterling Connect:Direct for Unix 4.1.0 before 4.1.0.4 iFix073 and 4.2.0 before 4.2.0.4 iFix003 uses default file permissions of 0664, which allows local users to obtain sensitive information via standard filesystem operations.

Severity

CVSS 3.1

3.3 low

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 23% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2016-08-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:sterling_connect\

References

http://www-01.ibm.com/support/docview.wss?uid=swg1IT14769
http://www-01.ibm.com/support/docview.wss?uid=swg21988278
http://www.securityfocus.com/bid/92336
http://www-01.ibm.com/support/docview.wss?uid=swg1IT14769
http://www-01.ibm.com/support/docview.wss?uid=swg21988278

Check your stack JSON