← Voltar para CVEs
CVE-2019-4716
CRITICALCISA KEV9.8
Descricao
IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting. IBM X-Force ID: 172094.
Detalhes CVE
Pontuacao CVSS v3.19.8
SeveridadeCRITICAL
Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vetor de ataqueNETWORK
ComplexidadeLOW
Privilegios necessariosNONE
Interacao do usuarioNONE
Publicado12/18/2019
Ultima modificacao1/14/2026
Fontekev
Avistamentos honeypot0
CISA KEV
FornecedorIBM
ProdutoPlanning Analytics
Nome da vulnerabilidadeIBM Planning Analytics Remote Code Execution Vulnerability
Data inclusao KEV2021-11-03
Prazo de remediacao2022-05-03
Uso em ransomwareUnknown
Produtos afetados
ibm:planning_analytics
Fraquezas (CWE)
CWE-94CWE-94
Referencias
http://packetstormsecurity.com/files/156953/IBM-Cognos-TM1-IBM-Planning-Analytics-Server-Configuration-Overwrite-Code-Execution.html(psirt@us.ibm.com)
http://seclists.org/fulldisclosure/2020/Mar/44(psirt@us.ibm.com)
https://exchange.xforce.ibmcloud.com/vulnerabilities/172094(psirt@us.ibm.com)
https://www.ibm.com/support/pages/node/1127781(psirt@us.ibm.com)
http://packetstormsecurity.com/files/156953/IBM-Cognos-TM1-IBM-Planning-Analytics-Server-Configuration-Overwrite-Code-Execution.html(af854a3a-2127-422b-91ae-364da2661108)
http://seclists.org/fulldisclosure/2020/Mar/44(af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/172094(af854a3a-2127-422b-91ae-364da2661108)
https://www.ibm.com/support/pages/node/1127781(af854a3a-2127-422b-91ae-364da2661108)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-4716(134c704f-9b21-4f2e-91b3-4a467353bcc0)
Correlacoes IOC
Sem correlacoes registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.