6 matches found
CVE-2020-4636
IBM Resilient OnPrem 38.2 could allow a privileged user to inject malicious commands through Python3 scripting. IBM X-Force ID: 185503...
CVE-2020-4636
CVE-2020-4636 affects IBM Resilient OnPrem (IBM Security SOAR), where a privileged user could inject malicious commands via Python3 scripting (sys module). Root cause involves Python3 scripting capability enabled in Resilient OnPrem 38.2 beta/GA, leading to command injection. Published details in...
CVE-2020-4636: Improper Neutralization of Special Elements used in a Command
IBM Resilient OnPrem 38.2 could allow a privileged user to inject malicious commands through Python3 scripting. IBM X-Force ID: 185503...
PT-2020-18177
Name of the Vulnerable Software and Affected Versions IBM Resilient OnPrem version 38.2 Description The issue allows a privileged user to inject malicious commands through Python3 scripting. Recommendations For IBM Resilient OnPrem version 38.2, consider restricting access to Python3 scripting...
Security Bulletin: IBM Resilient SOAR could allow a privileged user to inject malicious commands through Python3 scripting (CVE-2020-4636).
Summary It was possible for a privileged user to inject malicious commands through Python3 scripting, using the sys module, in a Beta version of Resilient. Vulnerability Details CVEID: CVE-2020-4636 DESCRIPTION: IBM Resilient could allow a privileged user to inject malicious commands through...
