Ibm I2 Analysts Notebook vulnerabilities

CVE-2020-4263 [HIGH] CWE-787 CVE-2020-4263: IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 175646.

CVE-2020-4266 [HIGH] CWE-787 CVE-2020-4266: IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 175649.

CVE-2020-4257 [HIGH] CWE-787 CVE-2020-4257: IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 175635.

CVE-2020-4262 [HIGH] CWE-787 CVE-2020-4262: IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 175645.

CVE-2020-4265 [HIGH] CWE-787 CVE-2020-4265: IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 175648.

CVE-2021-20431 [MEDIUM] CWE-613 CVE-2021-20431: IBM i2 Analyst's Notebook Premium 9.2.0, 9.2.1, and 9.2.2 does not invalidate session after logout w IBM i2 Analyst's Notebook Premium 9.2.0, 9.2.1, and 9.2.2 does not invalidate session after logout which could allow an an attacker to obtain sensitive information from the system. IBM X-Force ID: 196342.

CVE-2021-29767 [MEDIUM] CWE-209 CVE-2021-29767: IBM i2 Analyst's Notebook Premium 9.2.0, 9.2.1, and 9.2.2 could allow a remote attacker to obtain se IBM i2 Analyst's Notebook Premium 9.2.0, 9.2.1, and 9.2.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 202681.