CVE-2020-4311

IBM Tivoli Monitoring 6.3.0 could allow a local attacker to execute arbitrary code on the system

High · published April 23, 2020

CVSS v3.0
7.4
EPSS
0%
Percentile
24.1
In the wild
Unconfirmed
What it is

IBM Tivoli Monitoring 6.3.0 could allow a local attacker to execute arbitrary code on the system. By placing a specially crafted file, an attacker could exploit this vulnerability to load other DLL files located in the same directory and execute arbitrary code on the system. IBM X-Force ID: 177083.

The record
Technical detail
CVSS v3.0
7.4 · HIGH
Vector
CVSS:3.0/AV:L/S:U/UI:N/A:H/C:H/I:H/PR:N/AC:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00323 · 24.1th percentile
Published
2020-04-23T13:10Z
EPSS history
Timeline
  • 23 APR 13:10Z
    IBM Tivoli Monitoring 6.3.0 could allow a local attacker to execute arbitrary code on the system
    cvelistv5