Lucene search

PRIOn knowledge basePRION:CVE-2020-4302

HistoryOct 12, 2020 - 2:15 p.m.

Design/Logic Flaw

2020-10-1214:15:00

PRIOn knowledge base

www.prio-n.com

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

50.5%

JSON

IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to execute arbitrary code on the system, caused by a CSV injection. By persuading a victim to open a specially-crafted excel file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 176610.

CPENameOperatorVersion
cognos_analyticseq11.0.13
cognos_analyticseq11.0.13 fixpack1
cognos_analyticseq11.0.13 fixpack2
cognos_analyticsge11.1.0
cognos_analyticsle11.1.7
cognos_analyticsge11.0.0
cognos_analyticslt11.0.13

Name	Operator	Version
cognos_analytics	eq	11.0.13
cognos_analytics	eq	11.0.13 fixpack1
cognos_analytics	eq	11.0.13 fixpack2
cognos_analytics	ge	11.1.0
cognos_analytics	le	11.1.7
cognos_analytics	ge	11.0.0
cognos_analytics	lt	11.0.13

References

exchange.xforce.ibmcloud.com/vulnerabilities/176610

www.ibm.com/support/pages/node/6346922

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

50.5%

JSON

Related for PRION:CVE-2020-4302