VULNERABILITY INTELLIGENCE
CVE-2008-1595
CVSS score4.9 MEDIUM
EPSS probability0.35%
CISA KEVNot currently listed
Published2008-03-31
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:N/A:N
Description
The proc filesystem in the kernel in IBM AIX 5.2 and 5.3 does not properly enforce directory permissions when a file executing from a directory has weaker permissions than the directory itself, which allows local users to obtain sensitive information.