PT-2021-12143
CVE-2020-4623
·
تاريخ النشر
2021-07-26
·
تاريخ التحديث
2021-08-04
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
IBM i2 iBase version 8.9.13
Description
The issue allows a local authenticated attacker to execute arbitrary code on the system, caused by a DLL search order hijacking flaw. By using a specially-crafted .DLL file, an attacker could exploit this flaw to execute arbitrary code on the system.
Recommendations
For IBM i2 iBase version 8.9.13, at the moment, there is no information about a newer version that contains a fix for this issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾