CVE-2020-4688: Command Injection
IBM Security Guardium 10.6 and 11.2 could allow a local attacker to execute arbitrary commands on the system as an unprivileged user, caused by command injection vulnerability. IBM X-Force ID: 186700.
Other sources
IBM Security Guardium could allow a local attacker to execute arbitrary commands on the system as an unprivileged user, caused by command injection vulnerability.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-4688?
CVE-2020-4688 is a command injection vulnerability in IBM Security Guardium 10.6 and 11.2 that could allow a local attacker to execute arbitrary commands on the system as an unprivileged user.
Which products are affected by CVE-2020-4688?
IBM Security Guardium versions 10.5, 10.6, 11.0, 11.1, 11.2, and 11.3 are affected by CVE-2020-4688.
What is the severity of CVE-2020-4688?
CVE-2020-4688 has a severity rating of 7.8 (high).
How can a local attacker exploit CVE-2020-4688?
A local attacker can exploit CVE-2020-4688 by injecting arbitrary commands on the system as an unprivileged user.
Is there a fix available for CVE-2020-4688?
Yes, IBM has provided a fix for CVE-2020-4688. Please refer to the IBM support page for more information.