Описание
install.sh in the Embedded WebSphere Application Server (eWAS) 7.0 before FP33 in IBM Tivoli Integrated Portal (TIP) 2.1 and 2.2 sets world-writable permissions for the installRoot directory tree, which allows local users to gain privileges via a Trojan horse program.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:ibm:embedded_websphere_application_server:7.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:tivoli_integrated_portal:2.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:tivoli_integrated_portal:2.2:*:*:*:*:*:*:*
EPSS
Процентиль: 12%
0.00041
Низкий
6.9 Medium
CVSS2
Дефекты
CWE-264
Связанные уязвимости
github
больше 3 лет назад
install.sh in the Embedded WebSphere Application Server (eWAS) 7.0 before FP33 in IBM Tivoli Integrated Portal (TIP) 2.1 and 2.2 sets world-writable permissions for the installRoot directory tree, which allows local users to gain privileges via a Trojan horse program.
EPSS
Процентиль: 12%
0.00041
Низкий
6.9 Medium
CVSS2
Дефекты
CWE-264