Vulnerability Details CVE-2020-4670
IBM Planning Analytics Local 2.0 connects to a Redis server. The Redis server, an in-memory data structure store, running on the remote host is not protected by password authentication. A remote attacker can exploit this to gain unauthorized access to the server. IBM X-Force ID: 186401.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 59.0%
CVSS Severity
CVSS v3 Score 7.4
CVSS v2 Score 6.4
References
Products affected by CVE-2020-4670
-
cpe:2.3:a:ibm:planning_analytics_cloud:2.0.0
-
cpe:2.3:a:ibm:planning_analytics_local:2.0.0