high7.0
CVE-2015-7442
consoleinst.sh in IBM Installation Manager before 1.7.4.4 and 1.8.x before 1.8.4 and Packaging Utility before 1.7.4.4 and 1.8.x before 1.8.4 allows local users…
Impact
consoleinst.sh in IBM Installation Manager before 1.7.4.4 and 1.8.x before 1.8.4 and Packaging Utility before 1.7.4.4 and 1.8.x before 1.8.4 allows local users to gain privileges via a Trojan horse program that is located in /tmp with a name based on a predicted PID value.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Installation Manager | Versions 1.7.4.3, 1.8.0.0, 1.8.1.0, 1.8.2.0, 1.8.2.1, 1.8.3.0 |
| Ibm | Packaging Utility | through 1.7.4.3 Versions 1.8.0.0, 1.8.1.0, 1.8.2.0, 1.8.2.1, 1.8.3.0 |