Vulnerability Details : CVE-2020-4347
IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could be subject to attacks based on privilege escalation due to inappropriate file permissions for files used by WebSphere Application Server Network Deployment. IBM X-Force ID: 178412.
Vulnerability category: Gain privilege
Products affected by CVE-2020-4347
- cpe:2.3:a:ibm:infosphere_information_server:11.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:infosphere_information_server:11.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:infosphere_information_server:11.7:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2020-4347
0.16%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 35 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2020-4347
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST | |
|
7.3
|
HIGH | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L |
3.9
|
3.4
|
IBM Corporation | |
|
7.3
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L |
3.9
|
3.4
|
NIST |
CWE ids for CVE-2020-4347
-
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.Assigned by: nvd@nist.gov (Primary)
References for CVE-2020-4347
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/178412
IBM InfoSphere Information Server privilege escalation CVE-2020-4347 Vulnerability ReportVDB Entry;Vendor Advisory
-
https://www.ibm.com/support/pages/node/6191679
Security Bulletin: IBM InfoSphere Information Server may be vulnerable to attacks based on privilege escalationVendor Advisory
Jump to