Actively exploited · Published Dec 18, 2019 · Assigned by ibm

CVE-2019-4716

Critical 10.0 Exploited

In plain English

A critical-severity code injection in Planning Analytics from IBM. Attackers are actively exploiting it in the wild (listed by CISA on November 3, 2021). The chance it is exploited in the next 30 days is estimated at 86.4% (higher than 99.7% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit, Nuclei. Apply updates per vendor instructions.

Severity (CVSS 3.0)10.0Critical

Exploit odds (30 days)86.4%top 0.3% of all CVEs

Exploited in the wildYesCISA KEV since Nov 3, 2021

Attack tooling2Metasploit, Nuclei

CISA guidance

Apply updates per vendor instructions.

Federal agencies must remediate by May 3, 2022.

Official description

IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting. IBM X-Force ID: 172094.

Affected products (as reported)

Vendor	Product	Versions
IBM	Planning Analytics	2.0.02.0.8

Weakness: CWE-94 · Vector: CVSS:3.0/UI:N/AC:L/PR:N/I:H/S:C/AV:N/C:H/A:H/RC:C/RL:O/E:U

References

https://www.ibm.com/support/pages/node/1127781 x_refsource_CONFIRM
ibm-pa-cve20194716-code-exec (172094) vdb-entry, x_refsource_XF
20200327 CVE-2019-4716: conf overwrite + auth bypass = rce as root / SYSTEM on IBM PA / TM1 mailing-list, x_refsource_FULLDISC
http://packetstormsecurity.com/files/156953/IBM-Cognos-TM1-IBM-Planning-Analytics-Server-Configuration-Overwrite-Code-Execution.html x_refsource_MISC
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-4716 government-resource