Vulnerabilities > IBM > Installation Manager > 1.8.0.0

DATE CVE VULNERABILITY TITLE RISK
2016-01-02 CVE-2015-7442 Permissions, Privileges, and Access Controls vulnerability in IBM Installation Manager and Packaging Utility
consoleinst.sh in IBM Installation Manager before 1.7.4.4 and 1.8.x before 1.8.4 and Packaging Utility before 1.7.4.4 and 1.8.x before 1.8.4 allows local users to gain privileges via a Trojan horse program that is located in /tmp with a name based on a predicted PID value.
local
high complexity
ibm CWE-264
6.2
2015-03-25 CVE-2014-6134 Information Exposure vulnerability in IBM Installation Manager and Rational Clearcase
IBM Rational ClearCase 8.0.0 before 8.0.0.14 and 8.0.1 before 8.0.1.7, when Installation Manager before 1.8.2 is used, retains cleartext server passwords in process memory throughout the installation procedure, which might allow local users to obtain sensitive information by leveraging access to the installation account.
local
high complexity
ibm CWE-200
1.2