Security Advisory

CVE-2014-3020

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-07-29 20:00:00

Last updated 2024-08-06 10:28:46

Assigner ibm

CVSS score not scored

State PUBLISHED

Description

install.sh in the Embedded WebSphere Application Server (eWAS) 7.0 before FP33 in IBM Tivoli Integrated Portal (TIP) 2.1 and 2.2 sets world-writable permissions for the installRoot directory tree, which allows local users to gain privileges via a Trojan horse program.

← Browse all CVEs View on cve.org ↗