IBM Planning Analytics file upload
CVE-2023-42017

8HIGH

Key Information:

Vendor
IBM
Status
Planning Analytics
Vendor
CVE Published:
22 December 2023

Badges

đź‘ľ Exploit Existsđź“° News Worthy

Summary

The vulnerability discovered in IBM Planning Analytics Local 2.0 allows remote attackers to exploit improper validation of file extensions. By crafting an HTTP request, attackers may upload malicious scripts that enable them to execute arbitrary code on the affected system. This could lead to unauthorized access and manipulation of sensitive data, highlighting the importance of securing applications against file upload vulnerabilities.

Affected Version(s)

Planning Analytics 2.0

News Articles

favicon imageCybersecurityNews

IBM Cognos Analytics Vulnerability Allows Malicious File Upload & Injection Attacks

IBM has released a critical security update for its Cognos Analytics software, addressing two severe vulnerabilities: CVE-2023-42017 and CVE-2024-51466.

1 month ago

References

https://www.ibm.com/support/pages/node/7096528
vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/265567
vdb-entry

CVSS V3.1

Score:
8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • đź‘ľ

    Exploit known to exist

  • đź“°

    First article discovered by CybersecurityNews

  • Vulnerability published

  • Vulnerability Reserved

.