Paper/Archive/CVE-2019-4716

CVE-2019-4716

IBM Planning Analytics — IBM Planning Analytics Remote Code Execution Vulnerability

KEV · due 3 May EPSS 86%public exploit SSVC act CVSS 10.0

100

CVSS 10.0 (CNA)10.0 / 10 × 3030.0 In CISA KEV+3030.0 EPSS percentile 99.7.997 × 2019.9 Exploit: SSVC active+1010.0 SSVC exploitation: active+1010.0

Description · from the CVE record

IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting. IBM X-Force ID: 172094.

Affected

ProductAffectedFixed inSource

Planning Analytics2.0.0–CNA

Planning Analytics2.0.8–CNA

Scores by source

ibm (CNA)10.0CVSS:3.0/UI:N/AC:L/PR:N/I:H/S:C/AV:N/C:H/A:H/RC:C/RL:O/E:U

CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

refibm.com/support/pages/node/1127781 refexchange.xforce.ibmcloud.com/vulnerabilities/172094 refseclists.org/fulldisclosure/2020/Mar/44 refpacketstormsecurity.com/files/156953/IBM-Cognos-TM1-IBM-Planning-Analytics-Server-Configuration-Overwrite-Code-Execution.html refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-4716 kevcisa.gov/known-exploited-vulnerabilities-catalog