Description (CNA)
IBM Planning Analytics Local 2.1.0 through 2.1.21 is vulnerable to an open redirect that allows an attacker to redirect users to arbitrary external websites via a crafted URL. If used in SSO authentication flows, this could result in exposure of session tokens and allow attackers to hijack user sessions.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| IBM / Planning Analytics Local | affected 2.1.0 through 2.1.21 |
CWE
CWE-601
References
ADP enrichment
No English description supplied.
No references supplied.