IBM Watson CP4D Data Stores 4.6.0 through 4.6.3 could allow a user with physical access and specific knowledge of the system to modify files or data on the system. IBM X-Force ID: 248415.
The product allows user input to control or influence paths or file names that are used in filesystem operations.
Link | Tags |
---|---|
https://https://www.ibm.com/support/pages/node/6965452 | vendor advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/248415 | vdb entry |