VDB
CVE-2020-4670
CVE-2020-4670
PUBLISHED
CVSS 7.400000095367432 HIGH
IBM Planning Analytics Local 2.0 connects to a Redis server. The Redis server, an in-memory data structure store, running on the remote host is not protected by password authentication. A remote attacker can exploit this to gain unauthorized access to the server. IBM X-Force ID: 186401.
EPSS 1.68% · 82.5th percentile
Risk Scores
CVSS 3.0
7.400000095367432
CVSS:3.0/PR:N/AC:H/S:U/AV:N/UI:N/C:H/A:N/I:H/RC:C/E:U/RL:O
EPSS Score
1.68%
82.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| ibm | planning_analytics_cloud | 2.0.0 |
| IBM | Planning Analytics Local | 2.0 |
| ibm | planning_analytics_local | 2.0.0 |
Exploit Intelligence
Timeline
- May 17, 2021 CVE Published
- May 18, 2021 EPSS Score
- May 25, 2021 EPSS Score
- Jul 21, 2021 EPSS Score
- Nov 21, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Jan 21, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Mar 24, 2022 EPSS Score
- May 24, 2022 EPSS Score
- Jul 26, 2022 EPSS Score
- Sep 25, 2022 EPSS Score