Vulnetix
Try Vulnetix Request Demo
CVE-2020-4670 PUBLISHED CVSS 7.400000095367432 HIGH

IBM Planning Analytics Local 2.0 connects to a Redis server. The Redis server, an in-memory data structure store, running on the remote host is not protected by password authentication. A remote attacker can exploit this to gain unauthorized access to the server. IBM X-Force ID: 186401.

EPSS 0.62% · 69.9th percentile

Risk Scores

CVSS v3.0
7.400000095367432
CVSS:3.0/PR:N/AC:H/S:U/AV:N/UI:N/C:H/A:N/I:H/RC:C/E:U/RL:O
EPSS Score
0.62%
69.9th percentile

Affected Products

VendorProductVersions
ibmplanning_analytics_cloud2.0.0
IBMPlanning Analytics Local2.0
ibmplanning_analytics_local2.0.0

Timeline

References

Open in Interactive Console →