CVE-2020-4653 MEDIUM

CVE-2020-4653

Vendor Ibm
Product Planning Analytics
Published August 19, 2020
Last update September 16, 2024

CVSS base score

6.8/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality None
Integrity High

CVSS vector

CVSS:3.0/UI:R/PR:L/C:N/A:N/I:H/S:C/AC:L/AV:N/E:U/RC:C/RL:O

What the vulnerability does

01Description

IBM Planning Analytics 2.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.

Key dates

02Disclosure timeline

August 19, 2020 CVE published
September 16, 2024 Record updated