CVE-2020-4562: Medium severity IBM Planning Analytics vulnerability

Published Apr 23, 2021

Updated

IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information by allowing cross-window communication with unrestricted target origin via documentation frames.

Other sources

IBM Planning Analytics could allow a remote attacker to obtain sensitive information by allowing cross-window communication with unrestricted target origin via documentation frames.

Affected Software

1 affected component

IBM Planning Analytics=2.0

Event History

Apr 23, 2021

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionSeverityAffected Software

Apr 26, 2021

CVE Published

via MITRE·04:30 PM

Data Sourced

via MITRE·04:30 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-6446699

Frequently Asked Questions

What is the vulnerability ID for this IBM Planning Analytics vulnerability?

The vulnerability ID for this IBM Planning Analytics vulnerability is CVE-2020-4562.

What is the severity level of CVE-2020-4562?

The severity level of CVE-2020-4562 is medium with a CVSS score of 5.3.

How can a remote attacker exploit CVE-2020-4562?

A remote attacker can exploit CVE-2020-4562 by allowing cross-window communication with unrestricted target origin via documentation frames to obtain sensitive information.

Which version of IBM Planning Analytics is affected by CVE-2020-4562?

IBM Planning Analytics version 2.0 is affected by CVE-2020-4562.

Where can I find more information about CVE-2020-4562?

You can find more information about CVE-2020-4562 on the IBM X-Force Exchange website and the IBM Support pages.