CVEvulnerability
CVE-2020-4347
7.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-04-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.3 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- CVSS 3.0 ([email protected])
- 7.3 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-732
Description
IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could be subject to attacks based on privilege escalation due to inappropriate file permissions for files used by WebSphere Application Server Network Deployment. IBM X-Force ID: 178412.
Affected configurations
• ibm infosphere information server 11.3
• ibm infosphere information server 11.5
• ibm infosphere information server 11.7
Related
Weakness · CWE (1)
- CWE-732 Incorrect Permission Assignment for Critical Resource weakness
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/178412 VDB Entry, Vendor Advisory
- https://www.ibm.com/support/pages/node/6191679 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/178412 VDB Entry, Vendor Advisory
- https://www.ibm.com/support/pages/node/6191679 Vendor Advisory