Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
IBM Planning Analytics Cartridge for Cloud Pak for Data information disclosure
Vulnerability Description
IBM Planning Analytics Cartridge for Cloud Pak for Data 4.0 connects to a CouchDB server. An attacker can exploit an insecure password policy to the CouchDB server and collect sensitive information from the database. IBM X-Force ID: 247905.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
信息暴露
Vulnerability Title
IBM Planning Analytics 授权问题漏洞
Vulnerability Description
IBM Planning Analytics是美国国际商业机器（IBM）公司的一套业务规划分析解决方案。该方案支持自动化执行业务规划、预算和分析等流程。 IBM Planning Analytics Cartridge for Cloud Pak for Data 4.0版本存在安全漏洞，该漏洞源于攻击者可以利用 CouchDB 服务器的不安全密码策略并从数据库收集敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A