Description
IBM Planning Analytics is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting.
Recommended action
Apply updates per vendor instructions.
CISA remediation due date for U.S. federal agencies: 3 May 2022.
Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.