Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
install.sh in the Embedded WebSphere Application Server (eWAS) 7.0 before FP33 in IBM Tivoli Integrated Portal (TIP) 2.1 and 2.2 sets world-writable permissions for the installRoot directory tree, which allows local users to gain privileges via a Trojan horse program.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM Tivoli Integrated Portal Embedded WebSphere Application Server 安全漏洞
Vulnerability Description
IBM Tivoli Integrated Portal（TIP）是美国IBM公司的一套提供网络安全和数据库管理之类的管理要素的核心组件。Embedded WebSphere Application Server（eWAS）是一款嵌入式应用服务器产品。 TIP 2.1和2.2版本的eWAS FP33之前的7.0版本的install.sh文件中存在安全漏洞，该漏洞源于程序将installRoot目录树设置成全局可写权限。本地攻击者可通过木马程序利用该漏洞提升权限。
CVSS Information
N/A
Vulnerability Type
N/A