| Package | Affected versions | Patched versions |
|---|---|---|
| planning analytics local | ≥ 2.1.0, < 2.1.15 | 2.1.15 |
| planning analytics workspace | ≥ 2.1.0, < 2.1.15 | 2.1.15 |
IBM Planning Analytics Local 2.1.0 through 2.1.14 could allow a remote authenticated user to traverse directories on the system. An attacker could send a specially crafted URL request containing absolute path sequences to view, read, or write arbitrary files on the system.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free