10.0Crítica
KEV
CVE-2019-4716IBM Planning Analytics Remote Code Execution Vulnerability
Explotación conocida — IBM Planning Analytics Remote Code Execution Vulnerability
CISA confirmó el 03.11.2021 que esta vulnerabilidad se usa en ataques reales. Plazo para las agencias federales de EE. UU.: 03.05.2022.
Acción requerida: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2019-4716
Descripción
IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting. IBM X-Force ID: 172094.
Debilidad (CWE):
CWE-94
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| IBM | Planning Analytics | 2.0.0, 2.0.8 |
Referencias y parches
- https://www.ibm.com/support/pages/node/1127781 PatchVendor Advisory
- ibm-pa-cve20194716-code-exec (172094) vdb-entryVDB EntryVendor Advisory
- 20200327 CVE-2019-4716: conf overwrite + auth bypass = rce as root / SYSTEM on IBM PA / TM1 mailing-listExploitMailing ListThird Party Advisory
- http://packetstormsecurity.com/files/156953/IBM-Cognos-TM1-IBM-Planning-Analytics-Server-Configuration-Overwr… ExploitThird Party AdvisoryVDB Entry
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-4716 US Government Resource
Coincidencias CPE (NVD) (1)
cpe:2.3:a:ibm:planning_analytics:*:*:*:*:*:*:*:*≥ 2.0 ≤ 2.0.8