Description
IBM Planning Analytics 2.0 is vulnerable to a Remote File Include (RFI) attack. User input could be passed into file include commands and the web application could be tricked into including remote files with malicious code. IBM X-Force ID: 216891.
CVSS breakdown
CVSS 3.0
Scope
Unchanged
Privileges Required
None
Confidentiality
High
Availability
Low
Integrity
High
User Interaction
Required
Attack Vector
Network
Attack Complexity
High
RL
O
RC
Changed
E
Unchanged
Affected products
- ibm / planning_analytics2.0 – 2.0
- ibm / Planning Analytics Workspace2.0 – 2.0
Updated 15m ago · 8 sources