Description
IBM Planning Analytics 2.0 is vulnerable to malicious file upload in the My Account Portal. Attackers can make use of this weakness and upload malicious executable files into the system and it can be sent to victim for performing further attacks. IBM X-Force ID: 168523.
CVSS breakdown
CVSS 3.0
Scope
Unchanged
User Interaction
Required
Integrity
High
Attack Vector
Network
Privileges Required
Low
Confidentiality
Low
Attack Complexity
Low
Availability
None
RC
Changed
E
Unchanged
RL
O
Affected products
Updated 14m ago · 8 sources