PT-2020-18183 · Ibm · Ibm Planning Analytics

Javier García · Published 2020-08-19 · Updated 2021-07-21 · CVE-2020-4648

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions IBM Planning Analytics version 2.0

Description A vulnerability exists in IBM Planning Analytics where avatars in Planning Analytics Workspace could be modified by other users without proper authorization.

Recommendations For IBM Planning Analytics version 2.0, consider restricting access to avatar modification features in Planning Analytics Workspace until a patch is available.

Fix

Related Identifiers

CVE-2020-4648

Affected Products

Ibm Planning Analytics

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-4648 · Security Note
• https://osv.dev/vulnerability/CVE-2020-4648 · Vendor Advisory
• https://ibm.com/support/pages/node/6254788 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/186019 · Vendor Advisory