CVE-2023-27984

Name of the Vulnerable Software and Affected Versions IGSS Data Server versions 16.0.0.23040 and prior IGSS Dashboard versions 16.0.0.23040 and prior Custom Reports versions 16.0.0.23040 and prior

Description The issue exists due to insufficient input validation in the Custom Reports component of the IGSS Data Server and monitoring tools, Custom Reports and IGSS Dashboard. This could allow an attacker to execute arbitrary code using a specially crafted file, potentially leading to remote code execution when a user opens a malicious report file.

Recommendations For IGSS Data Server versions 16.0.0.23040 and prior, update to a version that includes the fix for this issue. For IGSS Dashboard versions 16.0.0.23040 and prior, update to a version that includes the fix for this issue. For Custom Reports versions 16.0.0.23040 and prior, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting the use of the Custom Reports component until a patch is available.