IBM Process Mining 2.0.0 through 2.2.1 could allow an authenticated user to upload a file with dangerous types that could be executed by another user if opened.
Product(s)Version(s) number and/or range Remediation/Fix/InstructionsIBM Process Mining OCP2.0.0 - 2.2.1
IBM strongly suggests that you address the vulnerabilities now for all affected products/versions listed above by installing 2.2.1 IF001
Upgrade to version 2.2.1 IF001
https://www.ibm.com/support/pages/readme-ibm-process-mining-221-if001
uniIBM Process Mining On-Prem2.0.0 - 2.2.1IBM strongly suggests that you address the vulnerabilities now for all affected products/versions listed above by installing 2.2.1
Steps
1. Go to IBM Support Portal
Navigate to https://ibm.com/mysupport and sign in with your IBMid before proceeding.
2. Open a case
- Click "Open a case" from the support portal.
- Select IBM Process Mining as the product.
- Fill in the case details, referencing the published security advisory: https://www.ibm.com/support/pages/node/7294875
-
Request the delivery of IBM Process Mining 2.2.1 IF001, which addresses the documented vulnerabilities.
-
Obtain the fix
The interim fix will be delivered directly through your support case once it has been opened.