CVE-2020-4721: Critical severity ibm i2 analyst's notebook premium vulnerability

Published Oct 29, 2020

Updated

IBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 187868.

Affected Software

2 affected components

IBM i2 Analysts Notebook=9.2.0

IBM i2 Analysts Notebook=9.2.1

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6356497

Event History

Oct 29, 2020

CVE Published

via MITRE·03:50 PM

Data Sourced

via MITRE·03:50 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2020-4721?

CVE-2020-4721 has been classified with a moderate severity level due to its potential for local arbitrary code execution.

How do I fix CVE-2020-4721?

To fix CVE-2020-4721, upgrade IBM i2 Analyst Notebook to version 9.2.2 or later.

Who is affected by CVE-2020-4721?

Users of IBM i2 Analyst Notebook versions 9.2.0 and 9.2.1 are affected by CVE-2020-4721.

What kind of attacks can CVE-2020-4721 facilitate?

CVE-2020-4721 can facilitate attacks that allow a local attacker to execute arbitrary code by exploiting memory corruption.

What should I do if I cannot update to fix CVE-2020-4721?

If unable to update, minimize exposure by avoiding opening untrusted or specially-crafted files that could exploit CVE-2020-4721.