IBM · Planning Analytics
CVE-2019-4716
IBM Planning Analytics Remote Code Execution Vulnerability
O que é
IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting. IBM X-Force ID: 172094.
CISA: IBM Planning Analytics is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting.
O que fazer
Apply updates per vendor instructions.
Prazo para as agências federais dos EUA: 3 de maio de 2022
Mais falhas exploradas de IBM
| Adicionado | Vulnerabilidade | Produto | Gravidade | Chance de ataque |
|---|---|---|---|---|
| 4 de ago. de 2026 | Code Injection | Langflow | Crítica 9,8 | 29% |
| 21 de fev. de 2023 | Code Execution | Aspera Faspex | Crítica 9,8 | >99,9% |
| 25 de mai. de 2022 | Invalid Input | InfoSphere BigInsights | Média 6,5 | 4,8% |
| 10 de jan. de 2022 | Code Injection. | WebSphere Application Server and Server Hypervisor Edition | Crítica 9,8 | 98% |
| 3 de nov. de 2021 | Security Bypass | Data Risk Manager | Crítica 9,0 | 70% |
| 3 de nov. de 2021 | Remote Code Execution | Data Risk Manager | Crítica 9,1 | 62% |
| 3 de nov. de 2021 | Directory Traversal | Data Risk Manager | Média 4,3 | 69% |
Fontes: Known Exploited Vulnerabilities (CISA, domínio público), CVE records (cve.org) e EPSS (FIRST). A chance de ataque é a estimativa EPSS de que alguém tente explorar a falha nos próximos 30 dias.