Ibm Embedded Websphere Application Server vulnerabilities

1 known vulnerability affecting ibm/embedded_websphere_application_server.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2014-3020MEDIUMCVSS 6.9v7.02014-07-29

CVE-2014-3020 [MEDIUM] CWE-264 CVE-2014-3020: install.sh in the Embedded WebSphere Application Server (eWAS) 7.0 before FP33 in IBM Tivoli Integra install.sh in the Embedded WebSphere Application Server (eWAS) 7.0 before FP33 in IBM Tivoli Integrated Portal (TIP) 2.1 and 2.2 sets world-writable permissions for the installRoot directory tree, which allows local users to gain privileges via a Trojan horse program.