Security Advisory

CVE-2023-35899

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-03-05 18:55:44
Last updated 2024-08-02 18:59:01
Assigner ibm
State PUBLISHED

Description

IBM Cloud Pak for Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 259354.