IBM Engineering Lifecycle Optimization Publishing 7.0.2 and 7.03 could allow a remote attacker to upload arbitrary files, caused by the improper validation of file extensions. By sending a specially crafted request, a remote attacker could exploit this vulnerability to upload a malicious file, which could allow the attacker to execute arbitrary code on the vulnerable system. IBM X-Force ID: 268751.
References
| Link | Resource |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/268751 | Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/268751 | Vendor Advisory |
| https://www.ibm.com/support/pages/node/7156757 | Vendor Advisory |
| https://www.ibm.com/support/pages/node/7156757 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
10 Mar 2025, 18:13
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/268751 - Vendor Advisory | |
| References | () https://www.ibm.com/support/pages/node/7156757 - Vendor Advisory | |
| CPE | cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* cpe:2.3:a:ibm:engineering_lifecycle_optimization_publishing:7.0.3:*:*:*:*:*:*:* cpe:2.3:a:ibm:engineering_lifecycle_optimization_publishing:7.0.2:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| First Time |
Linux
Microsoft windows Microsoft Ibm engineering Lifecycle Optimization Publishing Linux linux Kernel Ibm |
|
| CWE |
09 Jun 2024, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-06-09 13:15
Updated : 2025-03-10 18:37
NVD link : CVE-2023-45188
Mitre link : CVE-2023-45188
JSON object : View
Products Affected
linux
- linux_kernel
ibm
- engineering_lifecycle_optimization_publishing
microsoft
- windows
CWE
No CWE.