Remote Code Execution Vulnerability in IBM OpenPages by IBM
CVE-2021-29907

8.8HIGH

Key Information:

Vendor
IBM
Status
Openpages With Watson
Vendor
CVE Published:
31 August 2021

Summary

An authentication flaw in IBM OpenPages with Watson versions 8.1 and 8.2 allows an authenticated user to upload malicious files, potentially enabling the execution of arbitrary code on the server. This vulnerability could jeopardize the integrity and confidentiality of the entire system, making it essential for users to review their security posture and apply necessary mitigations. For further details, refer to the official IBM support page and the IBM X-Force research database.

Affected Version(s)

OpenPages with Watson 8.2

OpenPages with Watson 8.1

References

https://www.ibm.com/support/pages/node/6483607
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/207633
vdb-entryx_refsource_XF

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.