7

CVE-2015-7442

consoleinst.sh in IBM Installation Manager before 1.7.4.4 and 1.8.x before 1.8.4 and Packaging Utility before 1.7.4.4 and 1.8.x before 1.8.4 allows local users to gain privileges via a Trojan horse program that is located in /tmp with a name based on a predicted PID value.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
IbmInstallation Manager Version1.7.4.3
IbmInstallation Manager Version1.8.0.0
IbmInstallation Manager Version1.8.1.0
IbmInstallation Manager Version1.8.2.0
IbmInstallation Manager Version1.8.2.1
IbmInstallation Manager Version1.8.3.0
IbmPackaging Utility Version <= 1.7.4.3
IbmPackaging Utility Version1.8.0.0
IbmPackaging Utility Version1.8.1.0
IbmPackaging Utility Version1.8.2.0
IbmPackaging Utility Version1.8.2.1
IbmPackaging Utility Version1.8.3.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.04% 0.085
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7 1 5.9
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 6.2 1.9 10
AV:L/AC:H/Au:N/C:C/I:C/A:C