CVE-2020-4305 - IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data

Back Back to CVE browser

HIGH

IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data

Published Jul 9, 2020

8.8

HIGH

CVSS 3.1

EPSS 4.54%

Description

IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By persuading a victim to visit a specially crafted Web site, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 176677.

Affected products

Vendor IBM Product InfoSphere Information Server Default
n/a
- Version
  11.3
  Status
  affected
  Constraints
  -
- Version
  11.5
  Status
  affected
  Constraints
  -
- Version
  11.7
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

InfoSphere Information Server

n/a

Version	Status	Constraints
11.3	affected	-
11.5	affected	-
11.7	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-502

Deserialization of Untrusted Data

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25552
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/176677
vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6244664
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25552		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/176677		vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6244664		x_refsource_CONFIRMVendor Advisory