May 3, 2024
Proactive Defense: The Importance of Incident Response Planning in Cybersecurity
Rewterz Threat Advisory – CVE-2023-45165 – IBM AIX Vulnerability
December 24, 2023
Rewterz Threat Alert – COLDRIVER APT’s Credential Theft and Detection Evading Tactics Exposed by Microsoft – Active IOCs
December 25, 2023
Rewterz Threat Advisory – CVE-2023-45165 – IBM AIX Vulnerability
December 24, 2023
Rewterz Threat Alert – COLDRIVER APT’s Credential Theft and Detection Evading Tactics Exposed by Microsoft – Active IOCs
December 25, 2023
Severity
High
Analysis Summary
CVE-2023-42017
IBM Planning Analytics Local 2.0 could allow a remote attacker to upload arbitrary files, caused by the improper validation of file extensions. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to upload a malicious script, which could allow the attacker to execute arbitrary code on the vulnerable system.
Impact
- Gain Access
Indicators Of Compromise
CVE
- CVE-2023-42017
Affected Vendors
IBM
Affected Products
- IBM Planning Analytics 2.0
Remediation
Refer to IBM Security Advisory for patch, upgrade or suggested workaround information.