First published: Wed May 13 2020(Updated: )
IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by a memory corruption error. By persuading a victim to open a specially-crafted document, a remote attacker could exploit this vulnerability to execute arbitrary code on the system with the privileges of the victim or cause the application to crash. IBM X-Force ID: 176266
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM i2 Analyst's Notebook | <=9.2.1 | |
IBM i2 Analysts Notebook Premium | <=9.2.1 | |
IBM i2 Analyst's Notebook | =9.2.1 | |
IBM i2 Analyst's Notebook | =9.2.1 | |
Microsoft Windows |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-4285 is considered a critical vulnerability that allows remote code execution due to a memory corruption error.
To mitigate CVE-2020-4285, users should upgrade to a patched version of IBM i2 Analysts Notebook that addresses this vulnerability.
CVE-2020-4285 affects IBM i2 Analysts Notebook versions up to and including 9.2.1.
Yes, CVE-2020-4285 can be exploited remotely by persuading the victim to open a specially-crafted document.
CVE-2020-4285 is categorized as a remote code execution vulnerability.