Description
IBM Planning Analytics 2.0 could allow an attacker to obtain sensitive information due to an overly permissive CORS policy. IBM X-Force ID: 190836.
CVSS breakdown
CVSS 3.0
Privileges Required
None
User Interaction
None
Integrity
None
Attack Vector
Network
Availability
None
Attack Complexity
Low
Confidentiality
Low
Scope
Unchanged
E
Unchanged
RL
O
RC
Changed
Affected products
- ibm / planning_analytics2.0 – 2.0
Updated 15m ago · 8 sources