CVE-2020-4887

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.1 through 7.2 AIX VIOS version 3.1

Description The issue allows a local user to exploit a vulnerability in the gencore user command to create arbitrary files in any directory.

Recommendations For IBM AIX versions 7.1 through 7.2, consider restricting access to the gencore user command until a fix is available. For AIX VIOS version 3.1, restrict the use of the gencore user command to prevent exploitation. As a temporary workaround, consider disabling the gencore user command until a patch is available.