{"api_version":"1","generated_at":"2026-07-23T09:41:06+00:00","cve":"CVE-2020-4347","urls":{"html":"https://cve.report/CVE-2020-4347","api":"https://cve.report/api/cve/CVE-2020-4347.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2020-4347","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-4347"},"summary":{"title":"CVE-2020-4347","description":"IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could be subject to attacks based on privilege escalation due to inappropriate file permissions for files used by WebSphere Application Server Network Deployment. IBM X-Force ID: 178412.","state":"PUBLIC","assigner":"psirt@us.ibm.com","published_at":"2020-04-16 16:15:00","updated_at":"2021-07-21 11:39:00"},"problem_types":["CWE-732"],"metrics":[],"references":[{"url":"https://www.ibm.com/support/pages/node/6191679","name":"https://www.ibm.com/support/pages/node/6191679","refsource":"CONFIRM","tags":["Vendor Advisory"],"title":"Security Bulletin: IBM InfoSphere Information Server may be vulnerable to attacks based on privilege escalation","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/178412","name":"ibm-infosphere-cve20204347-priv-escalation (178412)","refsource":"XF","tags":["VDB Entry","Vendor Advisory"],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-4347","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-4347","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2020","cve_id":"4347","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"infosphere_information_server","cpe6":"11.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"4347","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"infosphere_information_server","cpe6":"11.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"4347","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"infosphere_information_server","cpe6":"11.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"4347","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"infosphere_information_server","cpe6":"11.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"4347","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"infosphere_information_server","cpe6":"11.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"4347","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"infosphere_information_server","cpe6":"11.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"DATE_PUBLIC":"2020-04-15T00:00:00","ASSIGNER":"psirt@us.ibm.com","STATE":"PUBLIC","ID":"CVE-2020-4347"},"impact":{"cvssv3":{"TM":{"E":"U","RC":"C","RL":"O"},"BM":{"SCORE":"7.300","I":"L","C":"L","S":"U","AV":"N","AC":"L","UI":"N","A":"L","PR":"N"}}},"description":{"description_data":[{"lang":"eng","value":"IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could be subject to attacks based on privilege escalation due to inappropriate file permissions for files used by WebSphere Application Server Network Deployment. IBM X-Force ID: 178412."}]},"references":{"reference_data":[{"refsource":"CONFIRM","title":"IBM Security Bulletin 6191679 (InfoSphere Information Server)","url":"https://www.ibm.com/support/pages/node/6191679","name":"https://www.ibm.com/support/pages/node/6191679"},{"refsource":"XF","title":"X-Force Vulnerability Report","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/178412","name":"ibm-infosphere-cve20204347-priv-escalation (178412)"}]},"data_type":"CVE","problemtype":{"problemtype_data":[{"description":[{"value":"Gain Privileges","lang":"eng"}]}]},"data_format":"MITRE","affects":{"vendor":{"vendor_data":[{"vendor_name":"IBM","product":{"product_data":[{"version":{"version_data":[{"version_value":"11.3"},{"version_value":"11.5"},{"version_value":"11.7"}]},"product_name":"InfoSphere Information Server"}]}}]}},"data_version":"4.0"},"nvd":{"publishedDate":"2020-04-16 16:15:00","lastModifiedDate":"2021-07-21 11:39:00","problem_types":["CWE-732"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW","baseScore":7.3,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.4},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"severity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:ibm:infosphere_information_server:11.3:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:ibm:infosphere_information_server:11.5:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:ibm:infosphere_information_server:11.7:*:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2020","CveId":"4347","Ordinal":"164375","Title":"CVE-2020-4347","CVE":"CVE-2020-4347","Year":"2020"},"notes":[{"CveYear":"2020","CveId":"4347","Ordinal":"1","NoteData":"IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could be subject to attacks based on privilege escalation due to inappropriate file permissions for files used by WebSphere Application Server Network Deployment. IBM X-Force ID: 178412.","Type":"Description","Title":null},{"CveYear":"2020","CveId":"4347","Ordinal":"2","NoteData":"2020-04-16","Type":"Other","Title":"Published"},{"CveYear":"2020","CveId":"4347","Ordinal":"3","NoteData":"2020-04-16","Type":"Other","Title":"Modified"}]}}}