PT-2020-18184
CVE-2020-4649
·
تاريخ النشر
2020-11-03
·
تاريخ التحديث
2020-11-10
الوصف من
CVSS 3.1
4.3
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Planning Analytics Local version 2.0.9.2
IBM Planning Analytics Workspace version 57
Description
The issue could expose data to non-privileged users due to the failure to invalidate TM1Web user sessions.
Recommendations
For IBM Planning Analytics Local version 2.0.9.2, consider implementing a session invalidation mechanism to prevent unauthorized access.
For IBM Planning Analytics Workspace version 57, restrict access to sensitive data until a proper session management fix is applied.
As a temporary workaround, consider manually terminating TM1Web user sessions after use to minimize the risk of data exposure.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾