Medium · 6.3 CVE-2021-38945 EUVD-2021-25382GHSA-77r3-r6pq-j636

IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 could allow a remote attacker to upload arbitrary files, caused by improper content validat…

Published Jun 24, 2022 · Updated Sep 17, 2024 · Assigned by ibm

Description

IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 could allow a remote attacker to upload arbitrary files, caused by improper content validation. IBM X-Force ID: 211238.

Affected products

Vendor	Product	Affected	Fixed
IBM	Cognos Analytics	11.2.0, 11.1.7, 11.2.1	—

References

https://www.ibm.com/support/pages/node/6597241
ibm-cognos-cve202138945-file-upload (211238) vdb-entry
https://security.netapp.com/advisory/ntap-20220729-0002/