CVE-2020-4649: Infoleak

Q: What is the vulnerability ID for this security issue?

The vulnerability ID for this security issue is CVE-2020-4649.

Q: What is the severity level of CVE-2020-4649?

CVE-2020-4649 has a severity level of medium.

Q: How does CVE-2020-4649 impact IBM Planning Analytics?

CVE-2020-4649 could expose data to non-privileged users by not invalidating TM1Web user sessions in IBM Planning Analytics Local 2.0.9.2 and IBM Planning Analytics Workspace 57.

Q: Which software versions are affected by CVE-2020-4649?

IBM Planning Analytics Local 2.0.9.2 is affected by CVE-2020-4649.

Q: How can CVE-2020-4649 be fixed?

To fix CVE-2020-4649, update IBM Planning Analytics Local to a version that includes the necessary security patches.

Published Nov 2, 2020

Updated

IBM Planning Analytics could expose data to non-privleged users by not invalidating TM1Web user sessions.

Other sources

IBM Planning Analytics Local 2.0.9.2 and IBM Planning Analytics Workspace 57 could expose data to non-privleged users by not invalidating TM1Web user sessions. IBM X-Force ID: 186022.

Affected Software

1 affected component

IBM Planning Analytics Local<=2.0.9.2

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6356539

Event History

Nov 2, 2020

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionSeverityAffected Software

Nov 3, 2020

CVE Published

via MITRE·01:25 PM

Data Sourced

via MITRE·01:25 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-6356539

Frequently Asked Questions

What is the vulnerability ID for this security issue?

The vulnerability ID for this security issue is CVE-2020-4649.

What is the severity level of CVE-2020-4649?