Sensitive Information Disclosure in IBM Planning Analytics Local
CVE-2020-4985
3.7LOW
Summary
IBM Planning Analytics Local 2.0 has a vulnerability that allows attackers to obtain sensitive information by exploiting a flaw in how body parameters are handled in queries. This enables unauthorized access to potentially critical data, emphasizing the need for prompt updates and security best practices to mitigate risks.
Affected Version(s)
Planning Analytics Local 2.0
References
CVSS V3.1
Score:
3.7
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved