CVE-2019-4612: Malicious File Upload
Published Dec 9, 2019
·Updated
IBM Planning Analytics 2.0 is vulnerable to malicious file upload in the My Account Portal. Attackers can make use of this weakness and upload malicious executable files into the system and it can be sent to victim for performing further attacks. IBM X-Force ID: 168523.
Affected Software
1 affected component
IBM Planning Analytics=2.0
Event History
Dec 9, 2019
CVE Published
via MITRE·10:30 PM
Data Sourced
via MITRE·10:30 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2019-4612.
2
What is the severity level of CVE-2019-4612?
The severity level of CVE-2019-4612 is high (8.8).
3
How does the vulnerability in IBM Planning Analytics 2.0 manifest?
The vulnerability in IBM Planning Analytics 2.0 allows attackers to upload malicious files through the My Account Portal.
4
What can an attacker do with the malicious file uploaded in IBM Planning Analytics 2.0?
An attacker can use the malicious file uploaded in IBM Planning Analytics 2.0 to perform further attacks.
5
Is there a fix available for CVE-2019-4612?
Please refer to IBM's support pages (link provided) for information on how to fix CVE-2019-4612.