File Upload Vulnerability in IBM Planning Analytics by IBM
CVE-2024-40693

8HIGH

Key Information:

Vendor

IBM
Status
Planning Analytics Local
Vendor
CVE Published:
24 January 2025

What is CVE-2024-40693?

IBM Planning Analytics versions 2.0 and 2.1 are susceptible to a file upload vulnerability due to inadequate validation of uploaded file content. This security flaw enables attackers to upload malicious executable files through the web interface, potentially leading to unauthorized access or the execution of harmful actions within the system. Users should implement immediate measures to secure their installations and mitigate the risk of exploitation.

Affected Version(s)

Planning Analytics Local 2.0, 2.1

References

https://www.ibm.com/support/pages/node/7168387
vendor-advisory

CVSS V3.1

Score:
8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.