CVE-2020-27583: Critical severity sap information steward vulnerability

Published Jan 21, 2021

Updated

UNSUPPORTED WHEN ASSIGNED IBM InfoSphere Information Server 8.5.0.0 is affected by deserialization of untrusted data which could allow remote unauthenticated attackers to execute arbitrary code. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Affected Software

1 affected component

IBM InfoSphere Information Server=8.5

Event History

Jan 21, 2021

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the vulnerability ID?

The vulnerability ID is CVE-2020-27583.

What is the affected software?

The affected software is IBM InfoSphere Information Server 8.5.0.0.

What is the severity of CVE-2020-27583?

The severity of CVE-2020-27583 is critical with a severity value of 9.8.

How does CVE-2020-27583 affect the affected software?

CVE-2020-27583 affects the affected software by allowing remote unauthenticated attackers to execute arbitrary code through deserialization of untrusted data.

Is there a solution for CVE-2020-27583?

As the vulnerability affects unsupported versions of IBM InfoSphere Information Server, applying an update or patch is not available. It is recommended to upgrade to a supported version.