Unrated severityNVD Advisory· Published Jul 29, 2014· Updated Jun 17, 2026
CVE-2014-3020
CVE-2014-3020
Description
install.sh in the Embedded WebSphere Application Server (eWAS) 7.0 before FP33 in IBM Tivoli Integrated Portal (TIP) 2.1 and 2.2 sets world-writable permissions for the installRoot directory tree, which allows local users to gain privileges via a Trojan horse program.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:ibm:embedded_websphere_application_server:7.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ibm:embedded_websphere_application_server:7.0:*:*:*:*:*:*:*
- (no CPE)range: < 7.0 FP33
cpe:2.3:a:ibm:tivoli_integrated_portal:2.1:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:ibm:tivoli_integrated_portal:2.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_integrated_portal:2.2:*:*:*:*:*:*:*
- (no CPE)range: 2.1, 2.2
Patches
Vulnerability mechanics
References
8- www-01.ibm.com/support/docview.wssnvdVendor Advisory
- secunia.com/advisories/59687nvd
- secunia.com/advisories/59795nvd
- secunia.com/advisories/60552nvd
- www-01.ibm.com/support/docview.wssnvd
- www-01.ibm.com/support/docview.wssnvd
- www.securityfocus.com/bid/69034nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/93056nvd
News mentions
0No linked articles in our index yet.