Lucene search

K
cvelistIbmCVELIST:CVE-2014-3020
HistoryJul 29, 2014 - 8:00 p.m.

CVE-2014-3020

2014-07-2920:00:00
ibm
www.cve.org
3

AI Score

6.3

Confidence

High

EPSS

0

Percentile

5.1%

install.sh in the Embedded WebSphere Application Server (eWAS) 7.0 before FP33 in IBM Tivoli Integrated Portal (TIP) 2.1 and 2.2 sets world-writable permissions for the installRoot directory tree, which allows local users to gain privileges via a Trojan horse program.

AI Score

6.3

Confidence

High

EPSS

0

Percentile

5.1%

Related for CVELIST:CVE-2014-3020