PT-2021-11411

CVE-2020-27583

Published

2021-01-21

Updated

2024-08-04

Description by

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 8.5.0.0

Description: The issue is related to the deserialization of untrusted data, which could allow remote unauthenticated attackers to execute arbitrary code. This problem only affects products that are no longer supported by the maintainer.

Recommendations: For IBM InfoSphere Information Server version 8.5.0.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Damiano Proietti

Davide De Rubeis

Matteo Brutti

Vendors

Affected products

Weakness enumeration

CWE-502: Deserialization of Untrusted Data

Related identifiers