CVE-2020-4759

Name of the Vulnerable Software and Affected Versions IBM FileNet Content Manager versions 5.5.4 through 5.5.5

Description The issue is caused by improper validation of csv file contents, allowing a remote attacker to execute arbitrary commands on the system. This is a result of a CVS Injection flaw.

Recommendations For versions 5.5.4 and 5.5.5, update to a version that includes the fix for this issue, as the current versions are potentially vulnerable to CVS Injection. At the moment, there is no information about a newer version that contains a fix for this vulnerability.