CVE-2020-4985 Information disclosure in Planning Analytics Local
An attacker can obtain sensitive information from IBM Planning Analytics Local by exploiting how the application accepts body parameters in queries.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-4985?
CVE-2020-4985 is a low-severity vulnerability in IBM Planning Analytics Local, published on 14 May 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
IBM Planning Analytics Local 2.0 could allow an attacker to obtain sensitive information due to accepting body parameters in a query. IBM X-Force ID: 192642.
Which versions are affected by CVE-2020-4985?
It affects 1 product.
Products include Ibm Planning Analytics Local.
How do I fix CVE-2020-4985?
No fix has been published for CVE-2020-4985 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-4985 being exploited?
There is no known exploitation of CVE-2020-4985 in the wild and no public exploit code.
Other vulnerabilities in IBM Planning Analytics Local
- CVE-2025-36357 IBM Planning Analytics Local Directory Traversal
- CVE-2026-10545 IBM Planning Analytics Local is affected by Open Redirect
- CVE-2026-13365 IBM Planning Analytics Local is affected by security vulnerabilities
- CVE-2024-35143 IBM Planning Analytics Local missing authentication
- CVE-2026-1267 IBM Planning Analytics Information Disclosure
Sources
Also known as GHSA-2fc6-73c9-q328.