CVE-2020-4551: High severity ibm i2 analyst's notebook premium vulnerability
IBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 183319.
Other sources
IBM i2 Analyst's Notebook could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-4551?
CVE-2020-4551 is considered a critical vulnerability as it allows local attackers to execute arbitrary code on affected systems.
How can I fix CVE-2020-4551?
To fix CVE-2020-4551, upgrade IBM i2 Analyst's Notebook to version 9.2.3 or later, which addresses the vulnerability.
Which versions are affected by CVE-2020-4551?
CVE-2020-4551 affects IBM i2 Analyst's Notebook versions 9.2.1 and 9.2.2.
What types of attacks can CVE-2020-4551 enable?
CVE-2020-4551 can enable local attackers to execute arbitrary code by convincing a user to open a specially-crafted file.
Is CVE-2020-4551 related to memory corruption?
Yes, CVE-2020-4551 is caused by a memory corruption issue in the affected versions of IBM i2 Analyst's Notebook.