IBM Jazz Foundation Relative Path Traversal Vulnerability Allowing File Upload

A relative path traversal vulnerability has been identified in IBM Jazz Foundation versions 7.0.2 prior to iFix034, 7.0.3 prior to iFix014, and 7.1.0 prior to iFix003. This vulnerability could allow an authenticated user to upload files to the system by improperly neutralizing sequences that could resolve to a restricted directory.

Impact

Exploitation of this vulnerability could lead to unauthorized file uploads, potentially allowing for further attacks such as remote code execution, depending on the uploaded file's nature.

Remediation

Users are advised to upgrade to IBM Jazz Foundation version 7.0.2 iFix035, 7.0.3 iFix015, or 7.1.0 iFix004. Instructions for downloading these fixes are available on the IBM Support Fix Central website.