Decryption Vulnerability in IBM Planning Analytics Local
CVE-2020-4367

5.9MEDIUM

Key Information:

Vendor
IBM
Status
Planning Analytics Local
Vendor
CVE Published:
2 June 2020

Summary

IBM Planning Analytics Local 2.0 is susceptible to a vulnerability arising from the use of suboptimal cryptographic algorithms. This flaw may enable unauthorized individuals to decrypt highly sensitive data, thus compromising the integrity and confidentiality of the information managed within the system. Organizations utilizing this product should assess the potential impact of this vulnerability and consider implementing mitigative measures as outlined in IBM's security advisories.

Affected Version(s)

Planning Analytics Local 2.0

References

https://www.ibm.com/support/pages/node/6214472
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/179001
vdb-entryx_refsource_XF

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.