What is CVE-2021-39040?

CVE-2021-39040 is a high-severity vulnerability in Ibm Planning Analytics Workspace, classified under Unrestricted Upload of File with Dangerous Type. CVSS score: 8.0/10. Published 2022-04-25.

How severe is CVE-2021-39040?

High severity. CVSS v3 base score is 8.0 out of 10.

Arbitrary file upload in Ibm Planning Analytics Workspace

CVE-2021-39040

IBM Planning Analytics Workspace 2.0 could be vulnerable to malicious file upload by not validating the file types or sizes. Attackers can make use of this weakness and upload malicious executable files into the system and it can be sent t…

Vulnerability class: Unrestricted File Upload

EPSS: 0.007 (50.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.0 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H.

Affected products

Ibm Planning Analytics Workspace — versions 2.0
Ibm Planning_analytics_workspace — versions 2.0

Weakness classification (CWE)

CWE-434 — Unrestricted Upload of File with Dangerous Type

References

psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
psirt@us.ibm.com (VDB Entry, vdb-entry, Vendor Advisory, x_refsource_XF)

Frequently asked questions

What is CVE-2021-39040?: CVE-2021-39040 is a high-severity vulnerability in Ibm Planning Analytics Workspace, classified under Unrestricted Upload of File with Dangerous Type. CVSS score: 8.0/10. Published 2022-04-25.
How severe is CVE-2021-39040?: High severity. CVSS v3 base score is 8.0 out of 10.