CVE-2020-4723: Critical severity ibm i2 analyst's notebook premium vulnerability

Published Oct 29, 2020

Updated

IBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 187873.

Affected Software

2 affected components

IBM i2 Analysts Notebook=9.2.0

IBM i2 Analysts Notebook=9.2.1

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6356497

Event History

Oct 29, 2020

CVE Published

via MITRE·03:50 PM

Data Sourced

via MITRE·03:50 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2020-4723?

CVE-2020-4723 is considered a critical vulnerability due to its potential to allow arbitrary code execution.

How do I fix CVE-2020-4723?

To mitigate CVE-2020-4723, it is recommended to update IBM i2 Analyst Notebook to the latest version that addresses this vulnerability.

Who is affected by CVE-2020-4723?

CVE-2020-4723 affects users of IBM i2 Analyst Notebook versions 9.2.0 and 9.2.1.

What type of attack does CVE-2020-4723 facilitate?

CVE-2020-4723 facilitates local attacks that exploit memory corruption to execute arbitrary code.

Can CVE-2020-4723 be exploited remotely?

CVE-2020-4723 requires local access to the system to exploit, meaning it cannot be exploited remotely.