Description
IBM Planning Analytics Local 2.0.9.2 and IBM Planning Analytics Workspace 57 could expose data to non-privleged users by not invalidating TM1Web user sessions. IBM X-Force ID: 186022.
CVSS breakdown
CVSS 3.0
Confidentiality
Low
Scope
Unchanged
Attack Vector
Network
Availability
None
Integrity
None
Privileges Required
Low
User Interaction
None
Attack Complexity
Low
RL
O
RC
Changed
E
Unchanged
Affected products
- ibm / planning_analytics_local2.0.9.2 – 2.0.9.2
- ibm / Planning Analytics Workspace57 – 57
Updated 8m ago · 8 sources