IBM Leads CVE-2015-0126 Multiple Arbitrary File Upload Vulnerabilities
BID:75366
Info
IBM Leads CVE-2015-0126 Multiple Arbitrary File Upload Vulnerabilities
| Bugtraq ID: | 75366 |
| Class: | Input Validation Error |
| CVE: |
CVE-2015-0126 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 19 2015 12:00AM |
| Updated: | Jun 19 2015 12:00AM |
| Credit: | IBM |
| Vulnerable: |
IBM Leads 9.1.1 IBM Leads 9.1 IBM Leads 9.0 IBM Leads 8.6 IBM Leads 8.5 IBM Leads 8.2 IBM Leads 8.1 IBM Leads 7.0 |
| Not Vulnerable: | |
Discussion
IBM Leads CVE-2015-0126 Multiple Arbitrary File Upload Vulnerabilities
IBM Leads is prone to multiple arbitrary file-upload vulnerabilities.
An attacker may leverage these issues to upload arbitrary files to the affected computer; this can result in arbitrary code execution within the context of the vulnerable application.
IBM Leads is prone to multiple arbitrary file-upload vulnerabilities.
An attacker may leverage these issues to upload arbitrary files to the affected computer; this can result in arbitrary code execution within the context of the vulnerable application.
Exploit / POC
IBM Leads CVE-2015-0126 Multiple Arbitrary File Upload Vulnerabilities
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
IBM Leads CVE-2015-0126 Multiple Arbitrary File Upload Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
IBM Leads CVE-2015-0126 Multiple Arbitrary File Upload Vulnerabilities
References:
References: