PT-2019-16878 · Ibm · Ibm Intelligent Operations Center

Published 2019-06-07 · Updated 2022-12-09 · CVE-2019-4069

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Intelligent Operations Center (IOC) versions 5.1.0 through 5.2.0

Description The issue arises from improper file type validation, allowing an attacker to upload malicious content.

Recommendations For versions 5.1.0 through 5.2.0, update to a version that properly validates file types to prevent malicious content uploads.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2019-4069

Affected Products

Ibm Intelligent Operations Center

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-4069 · Security Note
• https://ibm.com/support/docview.wss?uid=ibm10879953 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-4069 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/157014 · Vendor Advisory