PT-2020-6670
CVE-2020-4722
·
Published
2020-08-05
·
Updated
2021-07-21
Description by
CVSS 2.0
9.3
HighMetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
IBM i2 Analyst's Notebook versions 9.2.0 through 9.2.1
Description
The issue is related to a memory buffer overflow in the IBM i2 Analyst's Notebook tool. Exploitation of this issue could allow an attacker to execute arbitrary code by using a specially crafted file. An attacker could persuade a victim to open this file, thereby executing arbitrary code on the system.
Recommendations
For versions 9.2.0 and 9.2.1, consider avoiding the use of specially crafted files until a patch is available.
As a temporary workaround, restrict access to files from untrusted sources to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾