CVE-2020-4636: Command Injection

Q: What is CVE-2020-4636?

CVE-2020-4636 is a vulnerability in IBM Resilient OnPrem 38.2 that allows a privileged user to inject malicious commands through Python3 scripting.

Q: What is the severity of CVE-2020-4636?

CVE-2020-4636 has a severity rating of 8.2 (high).

Q: How does CVE-2020-4636 affect IBM Resilient OnPrem?

CVE-2020-4636 affects IBM Resilient OnPrem 38.2 by enabling a privileged user to inject malicious commands through Python3 scripting.

Q: How can I fix CVE-2020-4636?

To fix CVE-2020-4636, it is recommended to apply the necessary updates or patches provided by IBM Resilient.

Q: Where can I find more information about CVE-2020-4636?

You can find more information about CVE-2020-4636 on the IBM X-Force website and the IBM Support Pages.

Published Oct 15, 2020

Updated

IBM Resilient could allow a privileged user to inject malicious commands through Python3 scripting.

Other sources

IBM Resilient OnPrem 38.2 could allow a privileged user to inject malicious commands through Python3 scripting. IBM X-Force ID: 185503.

Affected Software

3 affected components

IBM Resilient OnPrem<=IBM Security SOAR

IBM Resilient Security Orchestration Automation And Response=38.2

Linux Linux kernel

Event History

Oct 15, 2020

CVE Published

via IBM·12:00 AM

Oct 16, 2020

CVE Published

via MITRE·04:40 PM

Data Sourced

via MITRE·04:40 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-6348694

Frequently Asked Questions

What is CVE-2020-4636?

CVE-2020-4636 is a vulnerability in IBM Resilient OnPrem 38.2 that allows a privileged user to inject malicious commands through Python3 scripting.

What is the severity of CVE-2020-4636?

CVE-2020-4636 has a severity rating of 8.2 (high).

How does CVE-2020-4636 affect IBM Resilient OnPrem?