Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2024-39752

IBM Analytics Content Hub file upload

Description

IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 could be vulnerable to malicious file upload by not validating the type of file uploaded to Explore Content. Attackers can make use of this weakness and upload malicious executable files into the system, and it can be sent to victim for performing further attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Analytics Content Hub

Default version status: unaffected

  • 2.0, 2.1, 2.2, 2.3affected

References