Description
IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x before 9.1.1.2 allows remote authenticated users to upload arbitrary GIFAR files, and consequently modify data, via unspecified vectors.
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21902933
- PO04455 vendor-advisory
- PO02715 vendor-advisory
- PO03923 vendor-advisory