CVE-2020-4302: Critical severity ibm cognos analytics vulnerability
IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to execute arbitrary code on the system, caused by a CSV injection. By persuading a victim to open a specially-crafted excel file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 176610.
Other sources
IBM Cognos Analytics could allow a remote attacker to execute arbitrary code on the system, caused by a CSV injection. By persuading a victim to open a specially-crafted excel file, an attacker could exploit this vulnerability to execute arbitrary code on the system.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2020-4302?
CVE-2020-4302 is a vulnerability in IBM Cognos Analytics that could allow a remote attacker to execute arbitrary code on the system.
How does CVE-2020-4302 occur?
CVE-2020-4302 occurs due to a CSV injection vulnerability in IBM Cognos Analytics.
What is the severity of CVE-2020-4302?
CVE-2020-4302 has a severity rating of 7.8 (critical).
Which versions of IBM Cognos Analytics are affected by CVE-2020-4302?
IBM Cognos Analytics versions 11.0.0 to 11.0.13 and versions 11.1.0 to 11.1.7 are affected by CVE-2020-4302.
How can I fix CVE-2020-4302?
To fix CVE-2020-4302, upgrade to a patched version of IBM Cognos Analytics (11.0.13-fixpack1 or 11.0.13-fixpack2) or a later version.