{"id":"CVE-2020-4347","aliases":["EUVD-2020-25594","GHSA-9mm9-qw6c-8v7p"],"status":"published","title":"IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could be subject to attacks based on...","description":"IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could be subject to attacks based on privilege escalation due to inappropriate file permissions for files used by WebSphere Application Server Network Deployment. IBM X-Force ID: 178412.","severity":{"version":"3.0","score":7.3,"vector":"CVSS:3.0/I:L/C:L/S:U/AV:N/AC:L/UI:N/A:L/PR:N/E:U/RC:C/RL:O","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.01809,"percentile":0.78783,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-269","CWE-732"],"published":"2020-04-16T15:35:22Z","modified":"2026-06-17T03:19:51Z","products":[{"vendor":"ibm","product":"infosphere information server"},{"vendor":"ibm","product":"infosphere_information_server"}],"references":[{"url":"https://www.ibm.com/support/pages/node/6191679","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/178412","tags":["vdb-entry","x_refsource_XF","x_transferred","VDB Entry","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-4347"},{"url":"https://github.com/advisories/GHSA-9mm9-qw6c-8v7p"}],"sources":{"cve":[{"id":"CVE-2020-4347","description":"IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could be subject to attacks based on privilege escalation due to inappropriate file permissions for files used by WebSphere Application Server Network Deployment. IBM X-Force ID: 178412.","status":"published","published":"2020-04-16T15:35:22.185Z","modified":"2024-09-16T23:16:23.698Z","cvss":[{"version":"3.0","score":7.3,"vector":"CVSS:3.0/I:L/C:L/S:U/AV:N/AC:L/UI:N/A:L/PR:N/E:U/RC:C/RL:O","level":"high","assessor":"cna"}],"updated_at":"2026-11-02T14:35:55.460269Z"}],"euvd":[{"id":"EUVD-2020-25594","description":"IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could be subject to attacks based on privilege escalation due to inappropriate file permissions for files used by WebSphere Application Server Network Deployment. IBM X-Force ID: 178412.","status":"published","published":"2020-04-16T15:35:22Z","modified":"2024-09-16T23:16:23Z","cvss":[{"version":"3.0","score":7.3,"vector":"CVSS:3.0/I:L/C:L/S:U/AV:N/AC:L/UI:N/A:L/PR:N/E:U/RC:C/RL:O","level":"high"}],"updated_at":"2026-11-03T00:54:55.200068Z"}],"ghsa":[{"id":"GHSA-9mm9-qw6c-8v7p","title":"IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could be subject to attacks based on...","description":"IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could be subject to attacks based on privilege escalation due to inappropriate file permissions for files used by WebSphere Application Server Network Deployment. IBM X-Force ID: 178412.","status":"published","published":"2022-05-24T17:15:35Z","modified":"2023-01-29T05:02:14Z","cwes":["CWE-269"],"updated_at":"2026-11-02T14:45:02.058324Z"}],"nvd":[{"id":"CVE-2020-4347","description":"IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could be subject to attacks based on privilege escalation due to inappropriate file permissions for files used by WebSphere Application Server Network Deployment. IBM X-Force ID: 178412.","status":"published","published":"2020-04-16T16:15:13.553Z","modified":"2026-06-17T03:19:51.563Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high","assessor":"primary"},{"version":"3.0","score":7.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high","assessor":"secondary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:05:59.125695Z"}]}}