What is CVE-2020-4347?

CVE-2020-4347 is a high-severity vulnerability in IBM Infosphere Information Server, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 7.3/10. Published 2020-04-16.

How severe is CVE-2020-4347?

High severity. CVSS v3 base score is 7.3 out of 10.

Vulnerability in IBM Infosphere Information Server

CVE-2020-4347

IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could be subject to attacks based on privilege escalation due to inappropriate file permissions for files used by WebSphere Application Server Network Deployment. IBM X-Force ID: 178412.

EPSS: 0.018 (75.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L.

Affected products

Ibm Infosphere Information Server — versions 11.3, 11.5, 11.7
Ibm Infosphere_information_server — versions 11.3, 11.5, 11.7

Weakness classification (CWE)

CWE-732 — Incorrect Permission Assignment for Critical Resource

References

psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
psirt@us.ibm.com (VDB Entry, vdb-entry, Vendor Advisory, x_refsource_XF)

Frequently asked questions

What is CVE-2020-4347?: CVE-2020-4347 is a high-severity vulnerability in IBM Infosphere Information Server, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 7.3/10. Published 2020-04-16.
How severe is CVE-2020-4347?: High severity. CVSS v3 base score is 7.3 out of 10.