CVE-2022-22308: High severity IBM Planning Analytics vulnerability
IBM Planning Analytics 2.0 is vulnerable to a Remote File Include (RFI) attack. User input could be passed into file include commands and the web application could be tricked into including remote files with malicious code. IBM X-Force ID: 216891.
Other sources
IBM Planning Analytics is vulnerable to a Remote File Include (RFI) attack. User input could be passed into file include commands and the web application could be tricked into including remote files with malicious code.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2022-22308.
What is the severity of CVE-2022-22308?
The severity of CVE-2022-22308 is high (CVSS score: 7.8).
What is the affected software?
The affected software is IBM Planning Analytics 2.0.
What is the recommended solution for CVE-2022-22308?
To mitigate CVE-2022-22308, apply the latest security patches provided by IBM and follow the guidance provided in their support page.
Where can I find more information about CVE-2022-22308?
You can find more information about CVE-2022-22308 in the IBM X-Force ID: 216891 and in their support page.