Vulnerability Details CVE-2020-4669
IBM Planning Analytics Local 2.0 connects to a MongoDB server. MongoDB, a document-oriented database system, is listening on the remote port, and it is configured to allow connections without password authentication. A remote attacker can gain unauthorized access to the database. IBM X-Force ID: 184600.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 61.4%
CVSS Severity
CVSS v3 Score 7.4
CVSS v2 Score 6.4
References
Products affected by CVE-2020-4669
-
cpe:2.3:a:ibm:planning_analytics_cloud:2.0.0
-
cpe:2.3:a:ibm:planning_analytics_local:2.0.0