IBM Cognos TM1 / IBM Planning Analytics Server Configuration Overwrite / Code Execution Exploit

IBM Cognos TM1 Server / Planning Analytics Server TM1 suffers from a configuration overwrite vulnerability that can be leveraged to achieve code execution as SYSTEM via TM1 scripting. Extensive research is included in this advisory as well as the Metasploit module. IBM PA / TM1, dating back to...

IBM Cognos TM1 / IBM Planning Analytics Server Configuration Overwrite / Code Execution

Hi, Here's a fun one I have been working on for some time. tl;dr IBM PA / TM1, dating back to 2014, maybe 2009 is vulnerable to a unauthenticated configuration overwrite; this is abused to "fake authenticate" to it, and finally execute code as root / SYSTEM using TM1 scripting. Advisory below,...

CVE-2019-4716

IBM Planning Analytics (PA) versions 2.0.0–2.0.8 are vulnerable to a configuration overwrite that lets an unauthenticated attacker log in as admin and execute code as root/SYSTEM via TM1 scripting, potentially fully compromising the host. IBM remediation is to upgrade to PA 2.0.9 or apply availab...

CVE-2017-4716

...

CVE-2017-4716

CVE-2017-4716 is rejected/not used and does not represent an active vulnerability entry.

CVE-2016-4716

diskutil in DiskArbitration in Apple OS X before 10.12 allows local users to gain privileges via unspecified vectors...

CVE-2016-4716

diskutil in DiskArbitration in Apple OS X before 10.12 allows local users to gain privileges via unspecified vectors...

CVE-2016-4716

DiskArbitration (diskutil) in Apple OS X prior to 10.12 is affected by CVE-2016-4716, allowing a local user to gain privileges via unspecified vectors. The issue is addressed in macOS Sierra 10.12; system owners should upgrade to macOS 10.12 or newer to remediate. The description does not specify...

[SECURITY] [DSA 3373-1] owncloud security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3373-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 18, 2015 https://www.debian.org/security/faq...

CVE-2015-4716

CVE-2015-4716 is a directory traversal vulnerability in ownCloud Server’s routing component affecting Windows deployments; affected versions are before 7.0.6 and 8.0.x before 8.0.4, allowing remote attackers to reinstall the application or execute arbitrary code via unspecified vectors. Debian ad...

CVE-2015-4716

Directory traversal vulnerability in the routing component in ownCloud Server before 7.0.6 and 8.0.x before 8.0.4, when running on Windows, allows remote attackers to reinstall the application or execute arbitrary code via unspecified vectors...

[SECURITY] [DSA 3373-1] owncloud security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3373-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 18, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3373-1] owncloud security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3373-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 18, 2015 https://www.debian.org/security/faq -...

CVE-2012-4716

CVE-2012-4716 affects N-Tron 702-W Industrial Wireless Access Point devices. The root cause is hard-coded SSH and HTTPS private keys that are identical across different installations, enabling an attacker to decrypt traffic and compromise confidentiality/integrity of communications. The vulnerabi...

CVE-2014-4716

CVE-2014-4716 describes a cross-site request forgery (CSRF) vulnerability in Thomson TWG87OUIR. The flaw allows remote attackers to hijack the authentication of unspecified victims to perform password changes via the Password and PasswordReEnter parameters to the goform/RgSecurity endpoint. Explo...

CVE-2013-4716

CVE-2013-4716 affects Tattyan HP TOWN 5_9_3 and earlier. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the query string, potentially leading to arbitrary script execution in the victim’s browser. Affected product is ...

CVE-2011-4716

CVE-2011-4716 describes a directory traversal vulnerability in DreamBox DM800 (versions up to 1.6rc3, 1.5rc1 and earlier) that allows remote attackers to read arbitrary files via the file parameter. The affected component is the file handling logic within the DreamBox DM800 firmware. The underlyi...

CVE-2011-4716

creationtimestamp| type| source ---|---|--- 2011-06-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17422 2011-11-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36286...

CVE-2010-4716

Cross-site scripting XSS vulnerability in the WebPublisher component in Novell GroupWise before 8.02HP allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-4716

CVE-2010-4716 : XSS vulnerability in the WebPublisher component of Novell GroupWise prior to 8.02HP. Remote attackers can inject arbitrary web script or HTML via unspecified vectors. Affected: GroupWise WebPublisher (pre-8.02HP). Impact as stated: allows partial integrity impact with no confident...