Description
IBM Planning Analytics Local 2.1.0 through 2.1.21 is vulnerable to an open redirect that allows an attacker to redirect users to arbitrary external websites via a crafted URL. If used in SSO authentication flows, this could result in exposure of session tokens and allow attackers to hijack user sessions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Planning Analytics Local | 2.1.0 – ≤ 2.1.21 | — |
References
- https://www.ibm.com/support/pages/node/7278566 vendor-advisory patch