Severity
High
Analysis Summary
CVE-2023-42017
IBM Planning Analytics Local 2.0 could allow a remote attacker to upload arbitrary files, caused by the improper validation of file extensions. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to upload a malicious script, which could allow the attacker to execute arbitrary code on the vulnerable system.
Impact
- Gain Access
Indicators Of Compromise
CVE
- CVE-2023-42017
Affected Vendors
IBM
Affected Products
- IBM Planning Analytics 2.0
Remediation
Refer to IBM Security Advisory for patch, upgrade or suggested workaround information.