PT-2021-12268 · Ibm · Ibm Planning Analytics Local

Published 2021-05-14 · Updated 2021-05-20 · CVE-2020-4985

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Planning Analytics Local version 2.0

Description The issue allows an attacker to obtain sensitive information due to the acceptance of body parameters in a query.

Recommendations For IBM Planning Analytics Local version 2.0, consider restricting access to sensitive information and query parameters to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2020-4985

Affected Products

Ibm Planning Analytics Local

References · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/192642 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-4985 · Security Note
• https://ibm.com/support/pages/node/6452743 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-4985 · Vendor Advisory