CVE-2023-42017: IBM Planning Analytics file upload
IBM Planning Analytics Local 2.0 could allow a remote attacker to upload arbitrary files, caused by the improper validation of file extensions. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to upload a malicious script, which could allow the attacker to execute arbitrary code on the vulnerable system. IBM X-Force ID: 265567.
Other sources
IBM Planning Analytics Local could allow a remote attacker to upload arbitrary files, caused by the improper validation of file extensions. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to upload a malicious script, which could allow the attacker to execute arbitrary code on the vulnerable system.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-42017?
CVE-2023-42017 has been rated as a critical severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2023-42017?
To fix CVE-2023-42017, apply the latest security updates for IBM Planning Analytics version 2.0.
What types of attacks can CVE-2023-42017 facilitate?
CVE-2023-42017 can facilitate remote file upload attacks, potentially allowing the execution of malicious scripts.
What is the impact of exploiting CVE-2023-42017?
Exploiting CVE-2023-42017 can lead to unauthorized access and control over the affected system.
Who is affected by CVE-2023-42017?
CVE-2023-42017 affects users of IBM Planning Analytics version 2.0.