CVE-2021-39017

published 2022-07-14

CVE-2021-39017: IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to upload arbitrary files, caused by…

medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C N I H A N

IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to upload arbitrary files, caused by improper access controls. IBM X-Force ID: 213725.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
ibm	engineering_lifecycle_optimization_publishing	—	—
ibm	engineering_lifecycle_optimization_publishing	—	—
ibm	engineering_lifecycle_optimization_publishing	—	—
ibm	engineering_lifecycle_optimization_publishing	—	—
ibm	engineering_lifecycle_optimization_publishing	—	—

CWE-434