Description
IBM Planning Analytics Workspace 2.0 could be vulnerable to malicious file upload by not validating the file types or sizes. Attackers can make use of this weakness and upload malicious executable files into the system and it can be sent to victim for performing further attacks. IBM X-Force ID: 214025.
CVSS breakdown
CVSS 3.0
Integrity
High
User Interaction
Required
Availability
None
Confidentiality
Low
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
Scope
Unchanged
RC
Changed
RL
O
E
Unchanged
Affected products
- ibm / Planning Analytics Workspace2.0 – 2.0
Updated 8m ago · 8 sources