CVE-2023-28958: IBM Watson Knowledge Catalog CSV injection

Published Jul 10, 2023

Updated

IBM Watson Knowledge Catalog on Cloud Pak for Data 4.0 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 251782.

Affected Software

1 affected component

IBM Watson Knowledge Catalog on Cloud Pak for Data=4.0

Remediation

Patch Available

https://www.ibm.com/support/pages/node/7009747

Event History

Jul 10, 2023

CVE Published

via MITRE·01:06 AM

Data Sourced

via MITRE·01:06 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2023-28958.

What is the severity of CVE-2023-28958?

The severity of CVE-2023-28958 is high with a CVSS score of 7.8.

How does CVE-2023-28958 affect IBM Watson Knowledge Catalog on Cloud Pak for Data?

CVE-2023-28958 potentially allows a remote attacker to execute arbitrary commands on the system through improper validation of CSV file contents in IBM Watson Knowledge Catalog on Cloud Pak for Data 4.0.

How do I fix CVE-2023-28958?

To fix CVE-2023-28958, users should apply the necessary patches or updates provided by IBM.

Where can I find more information about CVE-2023-28958?

You can find more information about CVE-2023-28958 on the IBM support page and the IBM X-Force ID: 251782.