Jose Castro Almeida

**Name of the Vulnerable Software and Affected Versions** macOS Catalina versions prior to 10.15.3 **Description** The issue allows an attacker to bypass Gatekeeper by searching for and opening a file from an attacker-controlled NFS mount. This was addressed with additional checks by Gatekeeper on files mounted through a network share. **Recommendations** For macOS Catalina versions prior to 10.15.3, update to macOS Catalina 10.15.3 to resolve the issue. As a temporary workaround, consider restricting access to NFS mounts from untrusted sources to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** IBM InfoSphere Global Name Management versions 5.0 through 6.0 IBM InfoSphere Identity Insight versions 8.1 through 9.0 **Description** The issue allows a remote attacker to exploit an XML External Entity Injection (XXE) attack when processing XML data, potentially exposing sensitive information or consuming memory resources. **Recommendations** For IBM InfoSphere Global Name Management versions 5.0 through 6.0, update to a version that includes a fix for the XML External Entity Injection (XXE) attack. For IBM InfoSphere Identity Insight versions 8.1 through 9.0, update to a version that includes a fix for the XML External Entity Injection (XXE) attack. As a temporary workaround, consider restricting the processing of XML data to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** IBM i2 Intelligent Analyis Platform versions 9.0.0 through 9.1.1 **Description** The issue is related to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this to expose sensitive information or consume memory resources. **Recommendations** For IBM i2 Intelligent Analyis Platform versions 9.0.0 through 9.1.1, consider disabling XML data processing until a patch is available to prevent potential XXE attacks. Restrict access to sensitive information and monitor memory resources to minimize the risk of exploitation.