Description
IBM Planning Analytics 2.0 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 208396.
CVSS breakdown
CVSS 3.0
Scope
Unchanged
Privileges Required
High
Availability
High
Integrity
High
Attack Vector
Network
Attack Complexity
Low
Confidentiality
High
User Interaction
Required
E
Unchanged
RL
O
RC
Changed
Affected products
- ibm / planning_analytics2.0 – 2.0
Updated 16m ago · 8 sources