CVE-2020-4361: Infoleak

Published Jul 17, 2020

Updated

IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information by disclosing private IP addresses in HTTP responses. IBM X-Force ID: 178766.

Other sources

IBM Planning Analytics Local could allow a remote attacker to obtain sensitive information by disclosing private IP addresses in HTTP responses.

— IBM

Affected Software

1 affected component

IBM Planning Analytics=2.0

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6249981

Event History

Jul 17, 2020

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionSeverityAffected Software

Jul 20, 2020

CVE Published

via MITRE·02:05 PM

Data Sourced

via MITRE·02:05 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-6249981

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2020-4361.

What is the severity level of CVE-2020-4361?

CVE-2020-4361 has a severity level of medium.

How does CVE-2020-4361 impact IBM Planning Analytics Local?

CVE-2020-4361 could allow a remote attacker to obtain sensitive information by disclosing private IP addresses in HTTP responses in IBM Planning Analytics Local.

What is the Common Weakness Enumeration (CWE) ID for CVE-2020-4361?

The CWE ID for CVE-2020-4361 is CWE-200.

Where can I find more information about CVE-2020-4361?

You can find more information about CVE-2020-4361 at the following links: [IBM X-Force ID: 178766](https://exchange.xforce.ibmcloud.com/vulnerabilities/178766) and [IBM Support Page](https://www.ibm.com/support/pages/node/6249981).