Vulnerability Bulletins

IBM Security Bulletin: IBM Sterling Connect:Direct for UNIX default file create permissions could expose sensitive information to a local user (CVE-2016-0380).

Affected software	IBM

When receiving a new data file, IBM Sterling Connect:Direct for UNIX uses create mode 664 by default. These permission settings may not be appropriate in some scenarios.CVE(s): CVE-2016-0380Affected product(s) and affected version(s):IBM Sterling Connect:Direct for Unix 4.2.0 IBM Sterling Connect:Direct for Unix 4.1.0Refer to the following reference URLs for remediation and additional vulnerability details:Source Bulletin: http://www-01.ibm.com/support/docview.wss?uid=swg21988278X-Force More info: https://www.ibm.com/blogs/psirt/ibm-security-bulletin-ibm-sterling-connectdirect-for-unix-default-file-create-permissions-could-expose-sensitive-information-to-a-local-user-cve-2016-0380/

IBM Security Bulletin: IBM Sterling Connect:Direct for UNIX default file create permissions could expose sensitive information to a local user (CVE-2016-0380).