PT-2021-12143

CVE-2020-4623

Published

2021-07-26

Updated

2021-08-04

Description by

CVSS 3.1

6.5

Medium

MetricsAV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM i2 iBase version 8.9.13

Description The issue allows a local authenticated attacker to execute arbitrary code on the system, caused by a DLL search order hijacking flaw. By using a specially-crafted .DLL file, an attacker could exploit this flaw to execute arbitrary code on the system.

Recommendations For IBM i2 iBase version 8.9.13, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploitability

Fix

Impacts

Researchers