Severity
Medium
Analysis Summary
CVE-2020-4649
IBM Planning Analytics Local 2.0.9.2 and IBM Planning Analytics Workspace 57 could expose data to non-privleged users by not invalidating TM1Web user sessions.
Impact
Obtain Information
Affected Vendors
IBM
Affected Products
- IBM Planning Analytics Local 2.0.9.2
- IBM Planning Analytics Workspace 57
Remediation
Refer to IBM Security Bulletin 6356539 for patch, upgrade or suggested workaround information.