Planning Analytics Cartridge for Cloud Pak for Data vulnerabilities

2 known vulnerabilities in Planning Analytics Cartridge for Cloud Pak for Data from IBM. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Planning Analytics Cartridge for Cloud Pak for…: Improper Authentication

  CVE-2023-27877Jul 19, 2023IBM

  IBM Planning Analytics Cartridge for Cloud Pak for Data 4.0 connects to a CouchDB server. An attacker can exploit an insecure password policy to the CouchDB server and collect sensitive information from the database. IBM X-Force ID: 247905.

• 7.5 High severity

  Planning Analytics Cartridge for Cloud Pak for…: Insertion of Sensitive Information into Log File

  CVE-2023-26026Jul 19, 2023IBM

  Planning Analytics Cartridge for Cloud Pak for Data 4.0 exposes sensitive information in logs which could lead an attacker to exploit this vulnerability to conduct further attacks. IBM X-Force ID: 247896.