Medium · 4.3 CVE-2020-4649 EUVD-2020-25896GHSA-xm98-722w-4373

IBM Planning Analytics Local 2.0.9.2 and IBM Planning Analytics Workspace 57 could expose data to non-privleged users by not invalidating T…

Published Nov 3, 2020 · Updated Sep 16, 2024 · Assigned by ibm

Vendor: IBM Product: Planning Analytics Local Product: Planning Analytics Workspace

Description

IBM Planning Analytics Local 2.0.9.2 and IBM Planning Analytics Workspace 57 could expose data to non-privleged users by not invalidating TM1Web user sessions. IBM X-Force ID: 186022.

Affected products

Vendor	Product	Affected	Fixed
IBM	Planning Analytics Local	2.0.9.2	—
IBM	Planning Analytics Workspace	57	—

References

https://www.ibm.com/support/pages/node/6356539
ibm-planning-cve20204649-info-disc (186022) vdb-entry