CVE-2024-25034

IBM Planning Analytics file upload

CVSS 8 HIGHEPSS 0.4%CWE-434

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 8EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado

Ciclo de vida

24 ene 2025Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

IBM Planning Analytics 2.0 and 2.1 could be vulnerable to malicious file upload by not validating the type of file in the File Manager T1 process. Attackers can make use of this weakness and upload malicious executable files into the system that can be sent to victims for performing further attacks.

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Productos afectados

IBM · Planning Analytics Local

Referencias

https://www.ibm.com/support/pages/node/7168387