CVE-2020-4723

IBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption

High · published October 29, 2020

CVSS v3.0
7.8
EPSS
2%
Percentile
74.8
In the wild
Unconfirmed
What it is

IBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 187873.

The record
Technical detail
CVSS v3.0
7.8 · HIGH
Vector
CVSS:3.0/PR:N/AC:L/A:H/UI:R/S:U/I:H/C:H/AV:L/RC:C/E:U/RL:O
CVSS v4.0
Not supplied
EPSS
0.01546 · 74.8th percentile
Published
2020-10-29T15:50Z
EPSS history
Timeline
  • 29 OCT 15:50Z
    IBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption
    cvelistv5