IBM Cloud Pak for Data Arbitrary File Upload Vulnerability

IBM Cloud Pak for Data is a data and AI platform with data structure from International Business Machines (IBM). All data can be made available for AI and analytics on any cloud. An arbitrary file upload vulnerability exists in IBM Cloud Pak for Data version 4.5, 4.6. The vulnerability stems from the application’s lack of effective validation of uploaded files. An attacker can exploit this vulnerability to upload malicious files to remotely execute arbitrary code.