Lucene search

IbmCVE-2020-4258

HistoryMay 14, 2020 - 4:15 p.m.

CVE-2020-4258

2020-05-1416:15:14

CWE-787

ibm

web.nvd.nist.gov

ibm

intelligence

analyis

platform

9.2.1

local

code

execution

vulnerability

memory corruption

nvd

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

33.3%

JSON

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 175637.

Affected configurations

Nvd

Vulners

Node

ibmi2_analysts_notebookMatch9.2.1-

ibmi2_analysts_notebookMatch9.2.1premium

AND

microsoftwindowsMatch-

VendorProductVersionCPE
ibmi2_analysts_notebook9.2.1cpe:2.3:a:ibm:i2_analysts_notebook:9.2.1:*:*:*:-:*:*:*
ibmi2_analysts_notebook9.2.1cpe:2.3:a:ibm:i2_analysts_notebook:9.2.1:*:*:*:premium:*:*:*
microsoftwindows-cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	i2_analysts_notebook	9.2.1	cpe:2.3:a:ibm:i2_analysts_notebook:9.2.1::::-:::
ibm	i2_analysts_notebook	9.2.1	cpe:2.3:a:ibm:i2_analysts_notebook:9.2.1::::premium:::
microsoft	windows	-	cpe:2.3:o:microsoft:windows:-:::::::*

CNA Affected

[
  {
    "product": "i2 Analysts Notebook",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "9.2.1"
      }
    ]
  }
]

References

exchange.xforce.ibmcloud.com/vulnerabilities/175637

www.ibm.com/support/pages/node/6209081

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

33.3%

JSON

Related for CVE-2020-4258