CVE-2020-4636 : IBM Resilient OnPrem 38.2 could allow a privileged user to inject malicious commands through Python3 scripting. IBM X-Fo

IBM Resilient OnPrem 38.2 could allow a privileged user to inject malicious commands through Python3 scripting. IBM X-Force ID: 185503.

Published 2020-10-16 17:15:13

Updated 2020-10-19 20:06:27

Source IBM Corporation

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2020-4636

EPSS FAQ

0.08%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 34 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-4636

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.5	MEDIUM	AV:N/AC:L/Au:S/C:P/I:P/A:P	8.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
8.2	HIGH	CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L	2.3	5.3	IBM Corporation
Attack Vector: Network Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Changed Confidentiality: High Integrity: Low Availability: Low
7.2	HIGH	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	1.2	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2020-4636

CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')

The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2020-4636

https://exchange.xforce.ibmcloud.com/vulnerabilities/185503

IBM Resilient OnPrem command execution CVE-2020-4636 Vulnerability Report
VDB Entry;Vendor Advisory
https://www.ibm.com/support/pages/node/6348694

Security Bulletin: IBM Resilient SOAR could allow a privileged user to inject malicious commands through Python3 scripting (CVE-2020-4636).
Vendor Advisory

Products affected by CVE-2020-4636

IBM » Resilient Security Orchestration Automation And Response » Version: 38.2
cpe:2.3:a:ibm:resilient_security_orchestration_automation_and_response:38.2:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A

Vulnerability Details : CVE-2020-4636

Exploit prediction scoring system (EPSS) score for CVE-2020-4636

CVSS scores for CVE-2020-4636

CWE ids for CVE-2020-4636

References for CVE-2020-4636

Products affected by CVE-2020-4636