Vulnerability Details CVE-2024-35143
IBM Planning Analytics Local 2.0 and 2.1 connects to a MongoDB server. MongoDB, a document-oriented database system, is listening on the remote port, and it is configured to allow connections without password authentication. A remote attacker can gain unauthorized access to the database. IBM X-Force ID: 292420.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 26.2%
CVSS Severity
CVSS v3 Score 6.7
References
Products affected by CVE-2024-35143
-
cpe:2.3:a:ibm:planning_analytics_local:2.0.0
-
cpe:2.3:a:ibm:planning_analytics_local:2.0.1
-
cpe:2.3:a:ibm:planning_analytics_local:2.0.2
-
cpe:2.3:a:ibm:planning_analytics_local:2.0.3
-
cpe:2.3:a:ibm:planning_analytics_local:2.0.4
-
cpe:2.3:a:ibm:planning_analytics_local:2.0.9
-
cpe:2.3:a:ibm:planning_analytics_local:2.0.9.1
-
cpe:2.3:a:ibm:planning_analytics_local:2.0.9.2
-
cpe:2.3:a:ibm:planning_analytics_local:2.1.0
-
cpe:2.3:a:ibm:planning_analytics_local:2.1.1
-
cpe:2.3:a:ibm:planning_analytics_local:2.1.2
-
cpe:2.3:a:ibm:planning_analytics_local:2.1.3
-
cpe:2.3:a:ibm:planning_analytics_workspace:*
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.54
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.55
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.56
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.57
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.58
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.59
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.60
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.61
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.62
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.63
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.64
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.65
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.66
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.67
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.68
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.69
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.70
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.71
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.72
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.73
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.74
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.75
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.76
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.77
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.78
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.79
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.80
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.81
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.82
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.83
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.84
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.85
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.86
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.87
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.88
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.89
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.90
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.91
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.92
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.93
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.94
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.95
-
cpe:2.3:a:ibm:planning_analytics_workspace:2.0.96