CVE-2019-4613: CSRF

Published Jan 4, 2020

Updated

IBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 168524.

Other sources

IBM Planning Analytics is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

Affected Software

1 affected component

IBM Planning Analytics=2.0

Event History

Jan 4, 2020

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionSeverityAffected Software

Feb 5, 2020

CVE Published

via MITRE·03:20 PM

Data Sourced

via MITRE·03:20 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-1172860

Frequently Asked Questions

What is the vulnerability ID for this IBM Planning Analytics vulnerability?

The vulnerability ID for this IBM Planning Analytics vulnerability is CVE-2019-4613.

What is the severity of CVE-2019-4613?

The severity of CVE-2019-4613 is high with a severity value of 8.8.

What is the affected software for CVE-2019-4613?

The affected software for CVE-2019-4613 is IBM Planning Analytics 2.0.

What is the CWE ID for this vulnerability?

The CWE ID for this vulnerability is CWE-352.

How can an attacker exploit CVE-2019-4613?

An attacker can exploit CVE-2019-4613 by conducting cross-site request forgery attacks.