IBM Cloud Pak for Data file upload

CVE-2022-36769

What is CVE-2022-36769?

IBM Cloud Pak for Data versions 4.5 and 4.6 are susceptible to a vulnerability that enables a privileged user to upload malicious files of harmful types. These files can be automatically processed within the product's environment, potentially compromising the integrity and security of the system. This vulnerability presents a significant risk, emphasizing the need for rigorous validation and sanctions against untrusted file uploads to mitigate possible threats.

References