PT-2019-17142 · Ibm · Ibm Planning Analytics

Publicado 2019-12-09 · Atualizado 2019-12-11 · CVE-2019-4612

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Planning Analytics version 2.0

Description The issue allows for malicious file upload in the My Account Portal. Attackers can exploit this weakness to upload malicious executable files into the system, which can then be sent to victims for further attacks.

Recommendations For IBM Planning Analytics version 2.0, consider restricting file upload capabilities in the My Account Portal until a fix is available. As a temporary workaround, implement strict validation and sanitization of uploaded files to minimize the risk of malicious file uploads.

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2019-4612

Produtos afetados

Ibm Planning Analytics

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-4612 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-4612 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/168523 · Aviso do Fabricante
• https://ibm.com/support/pages/node/1118565 · Aviso do Fabricante