CVE-2020-4649

IBM Planning Analytics Local 2.0.9.2 and IBM Planning Analytics Workspace 57 could expose data to non-privleged users by not invalidating TM1Web user sessions

Medium · published November 3, 2020

CVSS v3.0
4.3
EPSS
1%
Percentile
56.7
In the wild
Unconfirmed
What it is

IBM Planning Analytics Local 2.0.9.2 and IBM Planning Analytics Workspace 57 could expose data to non-privleged users by not invalidating TM1Web user sessions. IBM X-Force ID: 186022.

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/C:L/S:U/AV:N/A:N/I:N/PR:L/UI:N/AC:L/RL:O/RC:C/E:U
CVSS v4.0
Not supplied
EPSS
0.00816 · 56.7th percentile
Published
2020-11-03T13:25Z
EPSS history
Timeline
  • 03 NOV 13:25Z
    IBM Planning Analytics Local 2.0.9.2 and IBM Planning Analytics Workspace 57 could expose data to non-privleged users by not invalidating TM1Web user sessions
    cvelistv5