IBM Planning Analytics 信息泄露漏洞

IBM Planning Analytics is a suite of business planning and analytics solutions from IBM USA. The solution supports automated execution of processes such as business planning, budgeting and analysis. An information disclosure vulnerability exists in IBM Planning Analytics Workspace that allows a...

Security Bulletin: IBM Planning Analytics has addressed a security vulnerability (CVE-2016-2183)

Summary This Security Bulletin addresses a security vulnerability that has been remediated in IBM Planning Analytics 2.0.9.5 Vulnerability Details CVEID: CVE-2016-2183 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error in the DES/3DES cipher, us...

IBM Planning Analytics Information Disclosure Vulnerability (CNVD-2021-06944)

IBM Planning Analytics is a suite of business planning and analytics solutions from IBM USA. The solution supports automated execution of processes such as business planning, budgeting and analysis. A security vulnerability exists in IBM Planning Analytics version 2.0 that allows web pages to be...

IBM Planning Analytics Information Disclosure Vulnerability (CNVD-2021-06639)

IBM Planning Analytics is a suite of business planning and analytics solutions from IBM USA. The solution supports automated execution of processes such as business planning, budgeting and analysis. A security vulnerability exists in IBM Planning Analytics 2.0, which can be exploited by attackers...

IBM Planning Analytics Information Disclosure Vulnerability (CNVD-2021-06640)

IBM Planning Analytics is a suite of business planning and analytics solutions from IBM USA. The solution supports automated execution of processes such as business planning, budgeting and analysis. An information disclosure vulnerability exists in IBM Planning Analytics 2.0. The vulnerability...

CVE-2020-4873

IBM Planning Analytics 2.0 could allow an attacker to obtain sensitive information due to an overly permissive CORS policy. IBM X-Force ID: 190836...

CVE-2020-4881

IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the lack of server hostname verification for SSL/TLS communication. By sending a specially-crafted request, an attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force...

CVE-2020-4873

IBM Planning Analytics 2.0 could allow an attacker to obtain sensitive information due to an overly permissive CORS policy. IBM X-Force ID: 190836...

CVE-2020-4881

IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the lack of server hostname verification for SSL/TLS communication. By sending a specially-crafted request, an attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force...

CVE-2020-4871

IBM Planning Analytics 2.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 190834...

CVE-2020-4871

IBM Planning Analytics 2.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 190834...

Information disclosure

IBM Planning Analytics 2.0 could allow an attacker to obtain sensitive information due to an overly permissive CORS policy. IBM X-Force ID: 190836...

Code injection

IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the lack of server hostname verification for SSL/TLS communication. By sending a specially-crafted request, an attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force...

Code injection

IBM Planning Analytics 2.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 190834...

CVE-2020-4881

IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the lack of server hostname verification for SSL/TLS communication. By sending a specially-crafted request, an attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force...

CVE-2020-4873

IBM Planning Analytics 2.0 could allow an attacker to obtain sensitive information due to an overly permissive CORS policy. IBM X-Force ID: 190836...

CVE-2020-4873

CVE-2020-4873 affects IBM Planning Analytics 2.0. The vulnerability arises from an overly permissive CORS policy that could permit an attacker to obtain sensitive information from affected components. Documentation from IBM notes this under Planning Analytics Workspace vulnerabilities and referen...

CVE-2020-4881

CVE-2020-4881 affects IBM Planning Analytics 2.0. The root cause is the lack of server hostname verification in SSL/TLS communications, enabling a remote attacker to obtain sensitive information via a specially crafted request. Affected product: IBM Planning Analytics 2.0 (Planning Analytics Work...

CVE-2020-4871

IBM Planning Analytics 2.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 190834...

CVE-2020-4871

IBM Planning Analytics 2.0 is affected by CVE-2020-4871, an information-disclosure vulnerability where web pages can be stored locally and read by another user on the same system. This could expose user data. CVSS3.1 base score 5.5 (LOCAL, LOW complexity, NONE user interaction) with HIGH confiden...