Skip to content
OpenAdvisories
High · 7.7 CVE-2020-4623 EUVD-2020-25870GHSA-jqxj-6fm6-9j9w

IBM i2 iBase 8.9.13 could allow a local authenticated attacker to execute arbitrary code on the system, caused by a DLL search order hijack…

Published Jul 26, 2021 · Updated Sep 16, 2024 · Assigned by ibm

Description

IBM i2 iBase 8.9.13 could allow a local authenticated attacker to execute arbitrary code on the system, caused by a DLL search order hijacking flaw. By using a specially-crafted .DLL file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 184984.

Affected products

VendorProductAffectedFixed
IBM i2 iBase 8.9.13 —

References