CVE-2020-4305
First published: Wed Jul 08 2020(Updated: )
IBM InfoSphere Information Server could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By persuading a victim to visit a specially crafted Web site, an attacker could exploit this vulnerability to execute arbitrary code on the system.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM InfoSphere Information Server, Information Server on Cloud | <=11.7.1.1 and earlier 11.7 releases | |
| IBM InfoSphere Information Server, Information Server on Cloud | <=11.5 | |
| Ibm Infosphere Information Server | <=11.3 | |
| Ibm Infosphere Information Server | >=11.7.0.0<=11.7.1.1 | |
| Ibm Infosphere Information Server | =11.3.0 | |
| Ibm Infosphere Information Server | =11.5.0 | |
| Ibm Infosphere Information Server On Cloud | >=11.7.0.0<=11.7.1.1 | |
| Ibm Infosphere Information Server On Cloud | =11.5.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-4305?
CVE-2020-4305 is a vulnerability in IBM InfoSphere Information Server that allows a remote attacker to execute arbitrary code on the system.
How does CVE-2020-4305 occur?
CVE-2020-4305 occurs due to the deserialization of untrusted data in IBM InfoSphere Information Server.
What is the severity of CVE-2020-4305?
CVE-2020-4305 has a severity level of 8.8 (Critical).
Which versions of IBM InfoSphere Information Server are affected by CVE-2020-4305?
IBM InfoSphere Information Server versions 11.3, 11.5, and earlier 11.7 releases up to 11.7.1.1 are affected by CVE-2020-4305.
How can CVE-2020-4305 be exploited?
CVE-2020-4305 can be exploited by persuading a victim to visit a specially crafted website.
- collector/ibm-support
- collector/nvd-index
- agent/weakness
- agent/description
- vendor/ibm
- canonical/ibm infosphere information server, information server on cloud
- version/ibm infosphere information server, information server on cloud/11.7.1.1 and earlier 11.7 releases
- version/ibm infosphere information server, information server on cloud/11.5
- canonical/ibm infosphere information server
- version/ibm infosphere information server/11.3
- version/ibm infosphere information server/11.7.0.0
- version/ibm infosphere information server/11.7.1.1
- version/ibm infosphere information server/11.3.0
- version/ibm infosphere information server/11.5.0
- canonical/ibm infosphere information server on cloud
- version/ibm infosphere information server on cloud/11.7.0.0
- version/ibm infosphere information server on cloud/11.7.1.1
- version/ibm infosphere information server on cloud/11.5.0.0