Description
IM-LogicDesigner module of intra-mart Accel Platform contains insecure deserialization issue. This can be exploited only when IM-LogicDesigner is deployed on the system. Arbitrary code may be executed when some crafted file is imported by a user with the administrative privilege.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NTT DATA INTRAMART | intra-mart Accel Platform | 2017 Spring (8.0.4) through 2025 Autumn (8.0.27) | — |