Security Bulletin: IBM Resilient Platform could allow formula injection in Excel (CVE-2020-4633)

Summary Formula injection is possible in an Excel report generated by the Resilient platform, when a field name or value begins with specific characters. Vulnerability Details CVEID:CVE-2020-4633 DESCRIPTION: IBM Resilient could allow a remote attacker to execute arbitrary code on the system,...

CVE-2020-4633

IBM Resilient SOAR V38.0 could allow a remote attacker to execute arbitrary code on the system, caused by formula injection due to improper input validation...

CVE-2020-4633

CVE-2020-4633 affects IBM Resilient OnPrem/IBM Security SOAR. The IBM security bulletin describes a formula-injection vulnerability in Excel reports generated by the Resilient platform, caused by improper input validation that could allow remote execution of arbitrary code. Affected products incl...