6.7
Moyenne
CVE-2024-35143 IBM Planning Analytics Local 2.0 and 2.1 connects to a MongoDB server
Description
IBM Planning Analytics Local 2.0 and 2.1 connects to a MongoDB server. MongoDB, a document-oriented database system, is listening on the remote port, and it is configured to allow connections without password authentication. A remote attacker can gain unauthorized access to the database. IBM X-Force ID: 292420.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Planning Analytics Local | Versions non publiées |
Autres CVE de Planning Analytics Local
Les 32 CVE de Planning Analytics Local →
CVE-2026-10545
IBM Planning Analytics Local 2.1.0 through 2.1.21 is vulnerable to an open redirect that allows an attacker to…
7.5
Élevée
CVE-2026-1267
IBM Planning Analytics Local 2.1.0 through 2.1.17 could allow an unauthorized access to sensitive application data and…
6.5
Moyenne
CVE-2025-14806
IBM Planning Analytics Local 2.1.0 through 2.1.17 could allow an attacker to trick the caching mechanism into storing…
5.7
Moyenne
CVE-2025-36262
IBM Planning Analytics Local 2.0.0 through 2.0.106 and 2.1.0 through 2.1.13 could allow a malicious privileged user…
4.9
Moyenne