cvelist/2020/4xxx/CVE-2020-4347.json

{
    "CVE_data_meta": {
        "DATE_PUBLIC": "2020-04-15T00:00:00",
        "ASSIGNER": "psirt@us.ibm.com",
        "STATE": "PUBLIC",
        "ID": "CVE-2020-4347"
    },
    "impact": {
        "cvssv3": {
            "TM": {
                "E": "U",
                "RC": "C",
                "RL": "O"
            },
            "BM": {
                "SCORE": "7.300",
                "I": "L",
                "C": "L",
                "S": "U",
                "AV": "N",
                "AC": "L",
                "UI": "N",
                "A": "L",
                "PR": "N"
            }
        }
    },
    "description": {
        "description_data": [
            {
                "lang": "eng",
                "value": "IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could be subject to attacks based on privilege escalation due to inappropriate file permissions for files used by WebSphere Application Server Network Deployment. IBM X-Force ID: 178412."
            }
        ]
    },
    "references": {
        "reference_data": [
            {
                "refsource": "CONFIRM",
                "title": "IBM Security Bulletin 6191679 (InfoSphere Information Server)",
                "url": "https://www.ibm.com/support/pages/node/6191679",
                "name": "https://www.ibm.com/support/pages/node/6191679"
            },
            {
                "refsource": "XF",
                "title": "X-Force Vulnerability Report",
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/178412",
                "name": "ibm-infosphere-cve20204347-priv-escalation (178412)"
            }
        ]
    },
    "data_type": "CVE",
    "problemtype": {
        "problemtype_data": [
            {
                "description": [
                    {
                        "value": "Gain Privileges",
                        "lang": "eng"
                    }
                ]
            }
        ]
    },
    "data_format": "MITRE",
    "affects": {
        "vendor": {
            "vendor_data": [
                {
                    "vendor_name": "IBM",
                    "product": {
                        "product_data": [
                            {
                                "version": {
                                    "version_data": [
                                        {
                                            "version_value": "11.3"
                                        },
                                        {
                                            "version_value": "11.5"
                                        },
                                        {
                                            "version_value": "11.7"
                                        }
                                    ]
                                },
                                "product_name": "InfoSphere Information Server"
                            }
                        ]
                    }
                }
            ]
        }
    },
    "data_version": "4.0"
}