IBM Marketing Operations CVE-2014-8887 Arbitrary File Upload Vulnerability

Bugtraq ID:	74958
Class:	Input Validation Error
CVE:	CVE-2014-8887
Remote:	Yes
Local:	No
Published:	May 28 2015 12:00AM
Updated:	May 28 2015 12:00AM
Credit:	IBM
Vulnerable:	IBM Marketing Operations 9.1.1 IBM Marketing Operations 9.1 IBM Marketing Operations 9.0 IBM Marketing Operations 8.6 IBM Marketing Operations 8.5 IBM Marketing Operations 8.2 IBM Marketing Operations 8.1 IBM Marketing Operations 8.0 IBM Marketing Operations 7.6 IBM Marketing Operations 7.5 IBM Marketing Operations 7.4 IBM Marketing Operations 7.3 IBM Marketing Operations 7.2 IBM Marketing Operations 7.1 IBM Marketing Operations 7.0
Not Vulnerable:

IBM Marketing Operations CVE-2014-8887 Arbitrary File Upload Vulnerability

IBM Marketing Operations is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input.

An attacker may leverage this issue to upload arbitrary files to the affected computer. This may aid in further attacks.

IBM Marketing Operations CVE-2014-8887 Arbitrary File Upload Vulnerability

Attackers can exploit this issue through a browser.

IBM Marketing Operations CVE-2014-8887 Arbitrary File Upload Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM Marketing Operations CVE-2014-8887 Arbitrary File Upload Vulnerability

References:

• IBM Homepage (IBM)
  
• IBM Marketing Operations Home Page (IBM)
  
• Multiple vulnerabilities in IBM Marketing Operations (CVE-2014-6222, CVE-2014-88 (IBM)