PT-2024-24271
CVE-2024-31892
·
تاريخ النشر
2024-12-14
·
تاريخ التحديث
2024-12-19
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
IBM Storage Scale GUI versions 5.1.9.0 through 5.1.9.6
IBM Storage Scale GUI versions 5.2.0.0 through 5.2.1.1
Description
The issue allows a user to perform unauthorized actions after intercepting and modifying a csv file due to improper neutralization of formula elements.
Recommendations
For IBM Storage Scale GUI versions 5.1.9.0 through 5.1.9.6, update to a version outside of this range to mitigate the risk.
For IBM Storage Scale GUI versions 5.2.0.0 through 5.2.1.1, update to a version outside of this range to mitigate the risk.
As a temporary workaround, consider restricting access to csv files and implementing additional validation mechanisms for formula elements until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾