Multiple IBM Products Installer Insecure Temporary File Creation Vulnerability

Multiple IBM Products Installer Insecure Temporary File Creation Vulnerability

The installation process for multiple IBM products creates temporary files in an insecure manner.

An attacker with local access could potentially exploit this issue to perform symlink attacks, overwriting arbitrary files in the context of the affected application.

Successfully exploiting a symlink attack may allow an attacker to overwrite or corrupt sensitive files. This may result in a denial of service; other attacks may also be possible.

IBM Informix Dynamic Server version 10.0, IBM Informix Client SDK 2.90, and IBM Informix Connect 2.90 are vulnerable to this issue.