Skip to content
OpenAdvisories
High · 7.1 CVE-2022-22308 EUVD-2022-27454GHSA-vq67-xx7v-6qmg

IBM Planning Analytics 2.0 is vulnerable to a Remote File Include (RFI) attack. User input could be passed into file include commands and t…

Published Feb 21, 2022 · Updated Sep 16, 2024 · Assigned by ibm

Description

IBM Planning Analytics 2.0 is vulnerable to a Remote File Include (RFI) attack. User input could be passed into file include commands and the web application could be tricked into including remote files with malicious code. IBM X-Force ID: 216891.

Affected products

VendorProductAffectedFixed
IBM Planning Analytics 2.0 —
IBM Planning Analytics Workspace 2.0 —

References