Low severity · published Aug 8, 2016
CVE-2016-0380
IBM Sterling Connect:Direct for Unix 4.1.0 before 4.1.0.4 iFix073 and 4.2.0 before 4.2.0.4 iFix003 uses default file permissions of 0664, which allows local users to obtain…
3.3
CVSS
0.3%
EPSS
No
On KEV
Description
IBM Sterling Connect:Direct for Unix 4.1.0 before 4.1.0.4 iFix073 and 4.2.0 before 4.2.0.4 iFix003 uses default file permissions of 0664, which allows local users to obtain sensitive information via standard filesystem operations.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SC
Sterling Connect:direct · Ibm
4.1.0.0; 4.1.0.1; 4.1.0.2; 4.1.0.3; 4.1.0.4; 4.2.0.0; +4 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-0380
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-0380
Patch
http://www-01.ibm.com/support/docview.wss?uid=swg1IT14769
Mitigation
http://www-01.ibm.com/support/docview.wss?uid=swg21988278
Third Party Advisory
http://www.securityfocus.com/bid/92336
More from Sterling Connect:direct
8.4
CVE-2026-105453
IBM Sterling Connect:Direct for Unix Improper Privilege Management
7.8
CVE-2026-93888
IBM Sterling Connect:Direct for Unix Buffer Overflow
7.8
CVE-2020-4587
IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, 6.0.0, and 6.1.0 is vulnerable to a stack based buffer ovreflow, caused by improper bounds checking
7.5
CVE-2021-38891
IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information
7.5
CVE-2021-38890
IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials