Unrated severityNVD Advisory· Published Jul 29, 2014· Updated May 6, 2026
CVE-2014-3020
CVE-2014-3020
Description
install.sh in the Embedded WebSphere Application Server (eWAS) 7.0 before FP33 in IBM Tivoli Integrated Portal (TIP) 2.1 and 2.2 sets world-writable permissions for the installRoot directory tree, which allows local users to gain privileges via a Trojan horse program.
Affected products
3- cpe:2.3:a:ibm:embedded_websphere_application_server:7.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:tivoli_integrated_portal:2.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ibm:tivoli_integrated_portal:2.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_integrated_portal:2.2:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
8- www-01.ibm.com/support/docview.wssnvdVendor Advisory
- secunia.com/advisories/59687nvd
- secunia.com/advisories/59795nvd
- secunia.com/advisories/60552nvd
- www-01.ibm.com/support/docview.wssnvd
- www-01.ibm.com/support/docview.wssnvd
- www.securityfocus.com/bid/69034nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/93056nvd
News mentions
0No linked articles in our index yet.