IBM Planning Analytics Code Issue Vulnerability (CNVD-2024-01168)

IBM Planning Analytics is a suite of business planning analytics solutions from International Business Machines (IBM). The solution supports automated execution of processes such as business planning, budgeting and analysis. A code issue vulnerability exists in IBM Planning Analytics version 2.0, which stems from improper file extension validation, and can be exploited by a remote attacker to upload a malicious script by sending a specially crafted HTTP request, which could lead to the execution of arbitrary code on a vulnerable system.