Description
IBM Planning Analytics Local 2.1.0 through 2.1.17 could allow an attacker to trick the caching mechanism into storing and serving sensitive, user-specific responses as publicly cacheable resources.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Planning Analytics Local | 2.1.0 – ≤ 2.1.17 | — |
Advisories 1
- WID-SEC-2026-0759 IBM Planning Analytics: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 17, 2026
References
- https://www.ibm.com/support/pages/node/7263581 vendor-advisory patch