IBM Security Bulletin: IBM Planning Analytics Administration is affected by a vulnerability

Jun 29, 2019 9:02 am EDT

Categorized: Medium Severity

Share this post:

IBM Planning Analytics Administration has addressed a Cross-Site Scripting (XSS) vulnerability which could allow users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. This has been addressed in Planning Analytics Local Release 43.

CVE(s): CVE-2019-4134

Affected product(s) and affected version(s):

Affected Products and Versions

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10886607
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/158281

from IBM Product Security Incident Response Team https://ift.tt/2XdYSKB