Description (CNA)
IBM Planning Analytics 2.0 could be vulnerable to a Server-Side Request Forgery (SSRF) attack by constucting URLs from user-controlled data . This could enable attackers to make arbitrary requests to the internal network or to the local file system. IBM X-Force ID: 190852.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| IBM / Planning Analytics | affected 2.0 |
CWE
No CWE identifiers supplied.
References
- https://www.ibm.com/support/pages/node/6430643
- https://exchange.xforce.ibmcloud.com/vulnerabilities/190852
ADP enrichment
No English description supplied.