CVE-2020-4722: Critical severity ibm i2 analyst's notebook premium vulnerability

Published Oct 29, 2020

Updated

IBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 187870.

Affected Software

2 affected components

IBM i2 Analysts Notebook=9.2.0

IBM i2 Analysts Notebook=9.2.1

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6356497

Event History

Oct 29, 2020

CVE Published

via MITRE·03:50 PM

Data Sourced

via MITRE·03:50 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2020-4722?

The severity of CVE-2020-4722 is critical due to the potential for arbitrary code execution.

How do I fix CVE-2020-4722?

To fix CVE-2020-4722, users should upgrade to IBM i2 Analyst Notebook versions 9.2.2 or higher.

What types of attacks can be carried out using CVE-2020-4722?

CVE-2020-4722 allows attackers to execute arbitrary code on a vulnerable system through specially-crafted files.

Who is affected by CVE-2020-4722?

Users of IBM i2 Analyst Notebook versions 9.2.0 and 9.2.1 are affected by CVE-2020-4722.

When was CVE-2020-4722 announced?

CVE-2020-4722 was announced in 2020 as part of the IBM vulnerability disclosure process.