CVE-2020-4263: High severity ibm i2 analyst's notebook premium vulnerability
IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 175646.
Other sources
IBM i2 Intelligent Analyis Platform could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2020-4263
What is the severity of CVE-2020-4263?
The severity of CVE-2020-4263 is high (7.8).
Which software versions are affected by CVE-2020-4263?
IBM i2 Analysts Notebook versions up to and including 9.2.1 are affected by CVE-2020-4263.
How can a local attacker exploit CVE-2020-4263?
A local attacker can exploit CVE-2020-4263 by persuading a victim to open a specially-crafted file, which triggers a memory corruption and allows the attacker to execute arbitrary code on the system.
Is there a patch available for CVE-2020-4263?
Yes, a patch is available for CVE-2020-4263. You can download the patch from the IBM support website.