Ibm Installation Manager vulnerabilities

3 known vulnerabilities affecting ibm/installation_manager.

Total CVEs

3

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

CRITICAL1HIGH1LOW1

Vulnerabilities

Page 1 of 1

CVE-2015-7442HIGHCVSS 7.0v1.7.4.3v1.8.0.0+4 more2016-01-02

CVE-2015-7442 [HIGH] CWE-264 CVE-2015-7442: consoleinst.sh in IBM Installation Manager before 1.7.4.4 and 1.8.x before 1.8.4 and Packaging Utili consoleinst.sh in IBM Installation Manager before 1.7.4.4 and 1.8.x before 1.8.4 and Packaging Utility before 1.7.4.4 and 1.8.x before 1.8.4 allows local users to gain privileges via a Trojan horse program that is located in /tmp with a name based on a predicted PID value.

CVE-2014-6134LOWCVSS 1.2≤ 1.8.1.02015-03-25

CVE-2014-6134 [LOW] CWE-200 CVE-2014-6134: IBM Rational ClearCase 8.0.0 before 8.0.0.14 and 8.0.1 before 8.0.1.7, when Installation Manager bef IBM Rational ClearCase 8.0.0 before 8.0.0.14 and 8.0.1 before 8.0.1.7, when Installation Manager before 1.8.2 is used, retains cleartext server passwords in process memory throughout the installation procedure, which might allow local users to obtain sensitive information by leveraging access to the installation account.

CVE-2009-3518CRITICALCVSS 9.3PoC≤ 1.3.2v1.0+3 more2009-10-01

CVE-2009-3518 [CRITICAL] CWE-94 CVE-2009-3518: Argument injection vulnerability in the iim: URI handler in IBMIM.exe in IBM Installation Manager 1. Argument injection vulnerability in the iim: URI handler in IBMIM.exe in IBM Installation Manager 1.3.2 and earlier, as used in IBM Rational Robot and Rational Team Concert, allows remote attackers to load arbitrary DLL files via the -vm option, as demonstrated by a reference to a UNC share pathname.