CVE-2019-4130: Malicious File Upload
IBM Cloud Pak System 2.3 and 2.3.0.1 could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server. IBM X-Force ID: 158280.
Other sources
IBM Pure Application System could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2019-4130.
What is the severity of CVE-2019-4130?
The severity of CVE-2019-4130 is critical.
How does CVE-2019-4130 affect IBM Cloud Pak System?
CVE-2019-4130 affects IBM Cloud Pak System versions 2.2.5 - 2.2.6 and versions 2.3, 2.3.0.1.
What is the impact of CVE-2019-4130?
CVE-2019-4130 allows a remote attacker to upload arbitrary files and execute arbitrary code on the vulnerable server.
Is there a fix for CVE-2019-4130?
Yes, IBM has provided a fix for CVE-2019-4130. Please refer to the official IBM support page for more information.