CVE-2020-4764: CSRF

Published Dec 17, 2020

Updated

IBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 188898.

Other sources

IBM Planning Analytics is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

— IBM

Affected Software

3 affected components

IBM Planning Analytics=2.0

Linux Linux kernel

Microsoft Windows

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6386492

Event History

Dec 17, 2020

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionSeverityAffected Software

Dec 18, 2020

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-6386492

Frequently Asked Questions

What is CVE-2020-4764?

CVE-2020-4764 is a vulnerability in IBM Planning Analytics 2.0 that allows for cross-site request forgery attacks.

How severe is CVE-2020-4764?

CVE-2020-4764 has a severity score of 6.5 out of 10.

What software is affected by CVE-2020-4764?

IBM Planning Analytics 2.0 is affected by CVE-2020-4764.

How can an attacker exploit CVE-2020-4764?

An attacker can exploit CVE-2020-4764 by tricking a user into performing malicious actions on a trusted website.

Where can I find more information about CVE-2020-4764?

More information about CVE-2020-4764 can be found at the IBM X-Force ID: 188898.