CVE-2020-4552: High severity ibm i2 analyst's notebook premium vulnerability
IBM i2 Analyst Notebook 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 183320.
Other sources
IBM i2 Analyst's Notebook could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-4552?
CVE-2020-4552 is a vulnerability in IBM i2 Analyst's Notebook and IBM i2 Analyst's Notebook Premium that allows a local attacker to execute arbitrary code on the system.
How does CVE-2020-4552 work?
CVE-2020-4552 works by exploiting a memory corruption in IBM i2 Analyst's Notebook. An attacker can craft a specially-crafted file and persuade a victim to open it, triggering the execution of arbitrary code on the system.
What is the severity of CVE-2020-4552?
The severity of CVE-2020-4552 is rated as high (7.8).
Which versions of IBM i2 Analyst's Notebook are affected by CVE-2020-4552?
IBM i2 Analyst's Notebook 9.2.1 and IBM i2 Analyst's Notebook Premium 9.2.1 are affected by CVE-2020-4552.
How can I fix CVE-2020-4552?
To fix CVE-2020-4552, it is recommended to update to a version of IBM i2 Analyst's Notebook that is not affected by this vulnerability.