CVE-2020-4881

IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the lack of server hostname verification for SSL/TLS communication. By sending a specially-crafted request, an attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force...

CVE-2020-4873

CVE-2020-4873 affects IBM Planning Analytics 2.0. The vulnerability arises from an overly permissive CORS policy that could permit an attacker to obtain sensitive information from affected components. Documentation from IBM notes this under Planning Analytics Workspace vulnerabilities and referen...

CVE-2020-4881

CVE-2020-4881 affects IBM Planning Analytics 2.0. The root cause is the lack of server hostname verification in SSL/TLS communications, enabling a remote attacker to obtain sensitive information via a specially crafted request. Affected product: IBM Planning Analytics 2.0 (Planning Analytics Work...

CVE-2020-4873

IBM Planning Analytics 2.0 could allow an attacker to obtain sensitive information due to an overly permissive CORS policy. IBM X-Force ID: 190836...

CVE-2020-4871

IBM Planning Analytics 2.0 is affected by CVE-2020-4871, an information-disclosure vulnerability where web pages can be stored locally and read by another user on the same system. This could expose user data. CVSS3.1 base score 5.5 (LOCAL, LOW complexity, NONE user interaction) with HIGH confiden...

CVE-2020-4871

IBM Planning Analytics 2.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 190834...

PT-2021-12206

Name of the Vulnerable Software and Affected Versions IBM Planning Analytics version 2.0 Description The issue allows an attacker to obtain sensitive information due to an overly permissive CORS policy. Recommendations For IBM Planning Analytics version 2.0, consider restricting access to sensiti...

CVE-2020-4873: Incorrect Authorization

IBM Planning Analytics 2.0 could allow an attacker to obtain sensitive information due to an overly permissive CORS policy. IBM X-Force ID: 190836...

PT-2021-12205

Name of the Vulnerable Software and Affected Versions IBM Planning Analytics version 2.0 Description The issue allows web pages to be stored locally, which can then be read by another user on the system. Recommendations For IBM Planning Analytics version 2.0, consider implementing access controls...

IBM Planning Analytics 信息泄露漏洞

IBM Planning Analytics is a suite of business planning and analytics solutions from IBM USA. The solution supports automated execution of processes such as business planning, budgeting and analysis. An information disclosure vulnerability exists in IBM Planning Analytics 2.0. The vulnerability...

IBM Planning Analytics 访问控制错误漏洞

IBM Planning Analytics is a suite of business planning and analytics solutions from IBM USA. The solution supports automated execution of processes such as business planning, budgeting and analysis. A security vulnerability exists in IBM Planning Analytics 2.0, which can be exploited by attackers...

IBM Planning Analytics 信息泄露漏洞

IBM Planning Analytics is a suite of business planning and analytics solutions from IBM USA. The solution supports automated execution of processes such as business planning, budgeting and analysis. A security vulnerability exists in IBM Planning Analytics version 2.0 that allows web pages to be...

CVE-2020-4881: Origin Validation Error

IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the lack of server hostname verification for SSL/TLS communication. By sending a specially-crafted request, an attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force...

PT-2021-12207

Name of the Vulnerable Software and Affected Versions IBM Planning Analytics version 2.0 Description The issue is caused by the lack of server hostname verification for SSL/TLS communication, allowing a remote attacker to obtain sensitive information by sending a specially-crafted request...

CVE-2020-4871: Insecure Storage of Sensitive Information

IBM Planning Analytics 2.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 190834...

Security Bulletin: IBM Planning Analytics Workspace is affected by security vulnerabilities

Summary The Planning Analytics Workspace component of IBM Planning Analytics is affected by vulnerabilities . These have been addressed in IBM Planning Analytics Local v2.0 - Planning Analytics Workspace Release 60. Vulnerability Details CVEID: CVE-2020-4881 DESCRIPTION: IBM Planning Analytics ou...

CVE-2020-4871

IBM Planning Analytics 2.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 190834...

CVE-2020-4881

IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the lack of server hostname verification for SSL/TLS communication. By sending a specially-crafted request, an attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force...

CVE-2020-4873

IBM Planning Analytics 2.0 could allow an attacker to obtain sensitive information due to an overly permissive CORS policy. IBM X-Force ID: 190836...

IBM Planning Analytics Cross-Site Request Forgery Vulnerability (CNVD-2020-74626)

IBM Planning Analytics is a planning, budgeting, forecasting and analytics solution. A cross-site request forgery vulnerability exists in IBM Planning Analytics 2.0. An attacker could exploit this vulnerability to perform malicious and unauthorized actions transmitted from a user trusted by the...