CVE-2019-4716

IBM Planning Analytics Remote Code Execution Vulnerability

IBM Planning Analytics

CVSS

10.0Critical

ExploitationExploited in the wildAdded to KEV 3 Nov 2021CISA KEV

Exploit odds (EPSS)86.4%Chance of exploitation activity in the next 30 days, higher than 99% of CVEs. Scored 23 Oct 2026FIRST EPSS

Fixed inNone listedNo source names a fixed version yet

Federal deadline3 May 2022Remediation due date for US federal agenciesCISA KEV

CISA required actionApply updates per vendor instructions. CISA KEV

What fixes it

No source in this snapshot names a fixed version.

Timeline

18 Dec 2019, 16:15 UTCPublishedCVE List
19 Dec 2019Exploit code publicMetasploit
3 Nov 2021Added to CISA KEVCISA KEV

Public exploit code and templates 3

Exploit moduleIBM TM1 / Planning Analytics Unauthenticated Remote Code Execution 19 Dec 2019Metasploit
Remote exploitIBM TM1 / Planning Analytics - Unauthenticated Remote Code Execution (Metasploit) 31 Mar 2020Exploit-DB
Scanner templateIBM Planning Analytics - Authentication Bypass & Remote Code Execution Version DetectionNuclei

Listed so defenders can prioritize. Threatline links to the source and does not host exploit code.

Description

IBM Planning Analytics is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting.

Text from CVE List

Affected versions 2

Planning Analyticsaffected: 2.0.0CVE List
Planning Analyticsaffected: 2.0.8CVE List