CVE-2020-4644: Medium severity IBM Planning Analytics Local vulnerability
IBM Planning Analytics Local 2.0.0 through 2.0.9.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 185716.
Other sources
IBM Planning Analytics Local could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim.
— IBM
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2020-4644.
What is the severity of CVE-2020-4644?
The severity of CVE-2020-4644 is medium with a CVSS score of 6.1.
How does CVE-2020-4644 affect IBM Planning Analytics Local?
CVE-2020-4644 affects IBM Planning Analytics Local versions 2.0.0 through 2.0.9.1.
What is the impact of CVE-2020-4644?
CVE-2020-4644 allows a remote attacker to hijack the clicking action of the victim, potentially leading to further attacks.
How can I mitigate CVE-2020-4644?
To mitigate CVE-2020-4644, update IBM Planning Analytics Local to a version outside the affected range (2.0.0 - 2.0.9.1) and educate users about the risks of visiting malicious websites.