AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2014-3020

MEDIUM · CVSS 6.9 EPSS 0.32%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-07-29 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2014-3020
Severity
MEDIUM
CVSS
6.9
EPSS
0.32%

Original NVD Description

install.sh in the Embedded WebSphere Application Server (eWAS) 7.0 before FP33 in IBM Tivoli Integrated Portal (TIP) 2.1 and 2.2 sets world-writable permissions for the installRoot directory tree, which allows local users to gain privileges via a Trojan horse program.