Thursday, November 14, 2019

Security Bulletin: CSV Injection (CVE-2019-4490)

Nov 14, 2019 7:00 pm EST

Categorized: High Severity

Share this post:

Maliciously crafted data in UCD could generate a malicious csv download file, when opened with certain unpactched 3rd party tools.

Affected product(s) and affected version(s):

Affected Product(s) Version(s)
UCD – IBM UrbanCode Deploy All

Refer to the following reference URLs for remediation and additional vulnerability details:  
Source Bulletin: https://www.ibm.com/support/pages/node/1107249



from IBM Product Security Incident Response Team https://ift.tt/2NN7B55

No comments:

Post a Comment

Note: Only a member of this blog may post a comment.