PT-2020-18016 · Ibm · Ibm Infosphere Information Server+1

Ashneel Prasad · Published 2020-04-16 · Updated 2021-07-21 · CVE-2020-4347

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 11.3 through 11.7

Description The issue is related to privilege escalation due to inappropriate file permissions for files used by WebSphere Application Server Network Deployment.

Recommendations For IBM InfoSphere Information Server versions 11.3 through 11.7, consider adjusting the file permissions for files used by WebSphere Application Server Network Deployment to prevent privilege escalation attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2020-4347

Affected Products

Ibm Infosphere Information Server

Ibm Websphere Application Server Network Deployment

References · 5

• https://ibm.com/support/pages/node/6191679 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/178412 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-4347 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-4347 · Security Note
• https://t.me/cvenotify/2849 · Telegram Post