coldbraid

CVE-2019-4716 IBM Planning Analytics

IBM Planning Analytics is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting.

CVSS
not scored

CWE-94

On CISA’s exploited list

IBM Planning Analytics Remote Code Execution Vulnerability

Added
2021-11-03
Federal patch deadline
2022-05-03
Ransomware use
not known