Description (CNA)
IBM Data Risk Manager (iDNA) 2.0.6 could allow a remote authenticated attacker to upload arbitrary files, caused by the improper validation of file extensions. By sending a specially-crafted HTTP request, a remote attacker could exploit this vulnerability to upload a malicious file, which could allow the attacker to execute arbitrary code on the vulnerable system. IBM X-Force ID: 184979.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| IBM / Data Risk Manager | affected 2.0.6 |
CWE
No CWE identifiers supplied.
References
- https://www.ibm.com/support/pages/node/6335281
- https://exchange.xforce.ibmcloud.com/vulnerabilities/184979
ADP enrichment
No English description supplied.