CVE-2020-4623

IBM i2 iBase 8.9.13 could allow a local authenticated attacker to execute arbitrary code on the system, caused by a DLL search order hijacking flaw

High · published July 26, 2021

CVSS v3.0
7.7
EPSS
0%
Percentile
21.6
In the wild
Unconfirmed
What it is

IBM i2 iBase 8.9.13 could allow a local authenticated attacker to execute arbitrary code on the system, caused by a DLL search order hijacking flaw. By using a specially-crafted .DLL file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 184984.

The record
Technical detail
CVSS v3.0
7.7 · HIGH
Vector
CVSS:3.0/A:H/I:H/AC:L/C:H/UI:R/AV:L/PR:H/S:C/E:U/RC:C/RL:O
CVSS v4.0
Not supplied
EPSS
0.00300 · 21.6th percentile
Published
2021-07-26T12:10Z
EPSS history
Timeline
  • 26 JUL 12:10Z
    IBM i2 iBase 8.9.13 could allow a local authenticated attacker to execute arbitrary code on the system, caused by a DLL search order hijacking flaw
    cvelistv5