CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2019-12-18
IBM Planning Analytics (Cognos TM1) Configuration Overwrite and Remote Code Execution Vulnerability Advisory (CVE-2019-4716)
[Affected Scope] IBM Planning Analytics versions 2.0.0 through 2.0.8.
[Impact] Unauthenticated remote attackers can overwrite server configurations, authenticate as 'admin', and execute arbitrary commands with root or SYSTEM privileges via TM1 scripting.
[Mitigation] Immediately upgrade to IBM Planning Analytics version 2.0.9 or higher, and restrict network access to TM1 server ports.