Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2020-2320

Disclosure Date: December 03, 2020 (last updated February 22, 2025)
Jenkins Plugin Installation Manager Tool 2.1.3 and earlier does not verify plugin downloads.
Attacker Value
Unknown

CVE-2015-7442

Disclosure Date: January 02, 2016 (last updated November 25, 2024)
consoleinst.sh in IBM Installation Manager before 1.7.4.4 and 1.8.x before 1.8.4 and Packaging Utility before 1.7.4.4 and 1.8.x before 1.8.4 allows local users to gain privileges via a Trojan horse program that is located in /tmp with a name based on a predicted PID value.
0
Attacker Value
Unknown

CVE-2014-6134

Disclosure Date: March 25, 2015 (last updated October 05, 2023)
IBM Rational ClearCase 8.0.0 before 8.0.0.14 and 8.0.1 before 8.0.1.7, when Installation Manager before 1.8.2 is used, retains cleartext server passwords in process memory throughout the installation procedure, which might allow local users to obtain sensitive information by leveraging access to the installation account.
0
Attacker Value
Unknown

CVE-2009-3518

Disclosure Date: October 01, 2009 (last updated October 04, 2023)
Argument injection vulnerability in the iim: URI handler in IBMIM.exe in IBM Installation Manager 1.3.2 and earlier, as used in IBM Rational Robot and Rational Team Concert, allows remote attackers to load arbitrary DLL files via the -vm option, as demonstrated by a reference to a UNC share pathname.
0