CVE-2020-4305: Critical severity IBM InfoSphere Information Server, Information Server on Cloud vulnerability
IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By persuading a victim to visit a specially crafted Web site, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 176677.
Other sources
IBM InfoSphere Information Server could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By persuading a victim to visit a specially crafted Web site, an attacker could exploit this vulnerability to execute arbitrary code on the system.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-4305?
CVE-2020-4305 is a vulnerability in IBM InfoSphere Information Server that allows a remote attacker to execute arbitrary code on the system.
How does CVE-2020-4305 occur?
CVE-2020-4305 occurs due to the deserialization of untrusted data in IBM InfoSphere Information Server.
What is the severity of CVE-2020-4305?
CVE-2020-4305 has a severity level of 8.8 (Critical).
Which versions of IBM InfoSphere Information Server are affected by CVE-2020-4305?
IBM InfoSphere Information Server versions 11.3, 11.5, and earlier 11.7 releases up to 11.7.1.1 are affected by CVE-2020-4305.
How can CVE-2020-4305 be exploited?
CVE-2020-4305 can be exploited by persuading a victim to visit a specially crafted website.