Vulnerability in IBM Infosphere Information Server
CVE-2020-4347
IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could be subject to attacks based on privilege escalation due to inappropriate file permissions for files used by WebSphere Application Server Network Deployment. IBM X-Force ID: 178412.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L.
EPSS exploit prediction
EPSS: 0.018 (77.8th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 78th percentile — 77.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.018 · newest: 0.018 · change: 0.000
Affected products
- IBM Infosphere Information Server — versions 11.3, 11.5, 11.7
- IBM Infosphere Information Server — versions 11.3, 11.5, 11.7
Weakness classification (CWE)
References
- www.ibm.com/support/pages/node/6191679 (Vendor Advisory)
- exchange.xforce.ibmcloud.com/vulnerabilities/178412 (VDB Entry, vdb-entry, Vendor Advisory)
Frequently asked questions
- What is CVE-2020-4347?
- CVE-2020-4347 is a high-severity vulnerability in IBM Infosphere Information Server, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 7.3/10. Published 2020-04-16.
- How severe is CVE-2020-4347?
- High severity. CVSS v3 base score is 7.3 out of 10.