Description
IBM Cyber Fraud 1.0.0 through 1.0.2 could allow a remote authenticated attacker to execute arbitrary code due to unrestricted upload of a file with a dangerous type.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Cyber Fraud | 1.0.0 – ≤ 1.0.2 | — |
References
- https://www.ibm.com/support/pages/node/7290671 vendor-advisory patch