Security Bulletin: Multiple memory corruption vulnerabilities in IBM i2 Analyst's Notebook and IBM i2 Analyst's Notebook Premium

Summary There are a number of memory corruption vulnerabilities around the loading of .anb files that have been addressed with a fix pack. Vulnerability Details CVEID: CVE-2020-4261 DESCRIPTION: IBM i2 Intelligent Analyis Platform could allow a local attacker to execute arbitrary code on the...

CVE-2020-4266

CVE-2020-4266 affects IBM i2 Analyst's Notebook and IBM i2 Analyst's Notebook Premium (version 9.2.1). The vulnerability is a local memory corruption that could allow a locally authenticated user to execute arbitrary code by persuading a victim to open a specially crafted file. The IBM security b...