Aller au contenu
Se connecter
7.0 Élevée

CVE-2023-28958 IBM Watson Knowledge Catalog on Cloud Pak for Data 4.0 is potentially vulnerable to CSV Injection

Description

IBM Watson Knowledge Catalog on Cloud Pak for Data 4.0 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 251782.

Produits et versions touchés

Produit Versions touchées Corrigé en
Watson Knowledge Catalog on Cloud Pak for Data 4.0 Pas de correctif indiqué

Autres CVE de Watson Knowledge Catalog on Cloud Pak for Data

Les 2 CVE de Watson Knowledge Catalog on Cloud Pak for Data →
CVE-2023-28955 IBM Watson Knowledge Catalog on Cloud Pak for Data 4.0 could allow an authenticated user send a specially crafted… 6.5 Moyenne
Suivre cette CVE