CVE-2014-3020

No fix known EPSS <1%

install.sh in the Embedded WebSphere Application Server (eWAS) 7.0 before FP33 in IBM Tivoli Integrated Portal (TIP) 2.1 and 2.2 sets world-writable permissions for the installRoot directory tree, which allows local users to gain privileges via a Trojan horse program.

Published 2014-07-29 · CVE record · OSV

Products: ibm embedded_websphere_application_server, ibm tivoli_integrated_portal