CVE-2019-4069 File upload in Intelligent Operations Center
Attackers can upload malicious files due to improper validation, potentially leading to code execution on the server.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2019-4069?
CVE-2019-4069 is a high-severity vulnerability in IBM Intelligent Operations Center, published on 7 Jun 2019. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 does not properly validate file types, allowing an attacker to upload malicious content. IBM X-Force ID: 157014.
Weakness: CWE-434
Which versions are affected by CVE-2019-4069?
It affects 3 products.
Products include Ibm Intelligent Operations Center, Ibm Intelligent Operations Center for Emergency Management, Ibm Water Operations for Waternamics.
How do I fix CVE-2019-4069?
No fix has been published for CVE-2019-4069 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-4069 being exploited?
There is no known exploitation of CVE-2019-4069 in the wild and no public exploit code.
Other vulnerabilities in IBM Intelligent Operations Center
- CVE-2019-4066 Privilege escalation in Intelligent Operations Center
- CVE-2019-4419 XML external entity in Intelligent Operations Center
- CVE-2019-4420 Information disclosure in Intelligent Operations Center
- CVE-2019-4321 Weak cryptography in Intelligent Operations Center
- CVE-2019-4067 Weak cryptography in Intelligent Operations Center
Sources
Also known as GHSA-4v99-jhjf-8p4p.