IBM Planning Analytics Malicious File Upload Vulnerability

A vulnerability allowing malicious file uploads has been identified in IBM Planning Analytics versions 2.0 and 2.1. This issue arises because the File Manager T1 process does not properly validate file types, enabling attackers to upload harmful executable files that could be sent to victims for further exploitation.

Impact

Exploitation of this vulnerability could lead to unauthorized file uploads, allowing for the distribution of malicious executables that could be used to compromise system security or perform harmful actions on behalf of the user.

Remediation

Users are advised to upgrade to IBM Planning Analytics Local version 2.1.6 or version 2.0: Planning Analytics Workspace Release 99. Instructions for downloading these versions are available on Fix Central.