CVE-2021-29853 Information disclosure in Planning Analytics Local
IBM Planning Analytics fails to validate return values, potentially exposing sensitive information that attackers could use to launch further attacks.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-29853?
CVE-2021-29853 is a medium-severity vulnerability in IBM Planning Analytics Local, published on 1 Sep 2021. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
IBM Planning Analytics 2.0 could expose information that could be used to to create attacks by not validating the return values from some methods or functions. IBM X-Force ID: 205529.
Weakness: CWE-252
Which versions are affected by CVE-2021-29853?
It affects 1 product.
Products include Ibm Planning Analytics.
How do I fix CVE-2021-29853?
No fix has been published for CVE-2021-29853 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-29853 being exploited?
There is no known exploitation of CVE-2021-29853 in the wild and no public exploit code.
Other vulnerabilities in IBM Planning Analytics Local
- CVE-2019-4716 IBM Planning Analytics Remote Code Execution
- CVE-2026-19620 IBM Planning Analytics Local is affected by security vulnerabilities
- CVE-2026-19622 IBM Planning Analytics Local is affected by security vulnerabilities
- CVE-2026-19627 IBM Planning Analytics Local is affected by security vulnerabilities
- CVE-2024-25034 IBM Planning Analytics file upload
Sources
Also known as GHSA-62pg-x942-m53f.