CVE-2020-4881: High severity ibm planning analytics cloud vulnerability

Published Jan 18, 2020

Updated

IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the lack of server hostname verification for SSL/TLS communication. By sending a specially-crafted request, an attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 190851.

Other sources

IBM Planning Analytics ould allow a remote attacker to obtain sensitive information, caused by the lack of server hostname verification for SSL/TLS communication. By sending a specially-crafted request, an attacker could exploit this vulnerability to obtain sensitive information.

Affected Software

1 affected component

IBM Planning Analytics=2.0

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6404674

Event History

Jan 18, 2020

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionSeverityAffected Software

Jan 19, 2021

CVE Published

via MITRE·03:20 PM

Data Sourced

via MITRE·03:20 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-6404674

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2020-4881.

What is the severity level of CVE-2020-4881?

The severity level of CVE-2020-4881 is high (7.5).

What is the affected software?

The affected software is IBM Planning Analytics version 2.0.

How can a remote attacker exploit this vulnerability?

A remote attacker can exploit this vulnerability by sending a specially-crafted request to obtain sensitive information.

Is there a fix available for this vulnerability?

Yes, IBM has provided a fix for this vulnerability. Please refer to the references for more information.