Planning Analytics Workspace vulnerabilities
4 known vulnerabilities in Planning Analytics Workspace from IBM. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.0 High severity
IBM Planning Analytics Local: Absolute Path Traversal
IBM Planning Analytics Local 2.1.0 through 2.1.14 could allow a remote authenticated user to traverse directories on the system. An attacker could send a specially crafted URL request containing absolute path sequences to view, read, or write arbitrary files o
- 9.1 Critical severity
Planning Analytics Local: Missing Authentication for Critical Functionality
IBM Planning Analytics Local 2.0 and 2.1 connects to a MongoDB server. MongoDB, a document-oriented database system, is listening on the remote port, and it is configured to allow connections without password authentication. A remote attacker can gain unauthor
- 7.8 High severity
Planning Analytics Workspace: Unrestricted Upload of File with Dangerous Type
IBM Planning Analytics Local 2.0 could allow an attacker to upload arbitrary executable files which, when executed by an unsuspecting victim could result in code execution. IBM X-Force ID: 222066.
- 7.8 High severity
Planning Analytics: Inclusion of Functionality from Untrusted Control Sphere
IBM Planning Analytics 2.0 is vulnerable to a Remote File Include (RFI) attack. User input could be passed into file include commands and the web application could be tricked into including remote files with malicious code. IBM X-Force ID: 216891.