CVE-2020-4953: Infoleak

Published Feb 22, 2021

Updated

IBM Planning Analytics 2.0 could allow a remote authenticated attacker to obtain information about an organization's internal structure by exposing sensitive information in HTTP repsonses. IBM X-Force ID: 192029.

Other sources

IBM Planning Analytics Workspace could allow a remote authenticated attacker to obtain information about an organization's internal structure by exposing sensitive information in HTTP repsonses.

Affected Software

1 affected component

IBM Planning Analytics=2.0

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6412707

Event History

Feb 22, 2021

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionSeverityAffected Software

Feb 23, 2021

CVE Published

via MITRE·03:20 PM

Data Sourced

via MITRE·03:20 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-6412707

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2020-4953.

What is the severity level of CVE-2020-4953?

CVE-2020-4953 has a severity level of medium.

How does CVE-2020-4953 impact IBM Planning Analytics Workspace?

CVE-2020-4953 allows a remote authenticated attacker to obtain information about an organization's internal structure by exposing sensitive information in HTTP responses.

Which version of IBM Planning Analytics is affected by CVE-2020-4953?

IBM Planning Analytics version 2.0 is affected by CVE-2020-4953.

Are there any references available for CVE-2020-4953?

Yes, you can find references for CVE-2020-4953 at the following links: [Link](https://exchange.xforce.ibmcloud.com/vulnerabilities/192029) and [Link](https://www.ibm.com/support/pages/node/6412707).