IBM Planning Analytics: Authentication bypass via alternate path or channel
Summary
IBM Planning Analytics 2.0 and 2.1 (on-premise Local edition) contain an authentication bypass caused by improper validation of sub-requests. A remote attacker can bypass authentication and escalate privileges, which IBM rates with high impact to confidentiality, integrity and availability. The NVD record and the IBM bulletin list different CVSS scores for this CVE, so verify the score before using it for prioritisation.
Affected
- IBM Planning Analytics Local 2.0 (exact affected builds: unknown)
- IBM Planning Analytics Local 2.1.0 - 2.1.23
Fixed in
- IBM Planning Analytics Local 2.1: 2.1.24 or later (per IBM remediation table, as quoted by a third-party source; verify on IBM Fix Central)
- IBM Planning Analytics Local 2.0: Unknown. Obtain the fixed build from IBM.
- IBM Planning Analytics Cloud: Unknown.
Workaround
- Unknown. No vendor workaround documented in the sources reviewed.
Exploitation
- No public proof of concept found.
- Not known to be exploited in the wild (no KEV listing found in a third-party tracker).
- CISA SSVC assessment: Exploitation none, Automatable no, Technical Impact total.
- EPSS 0.00342 (Vulners).
Our recommendation
- Patch Planning Analytics Local 2.1 to 2.1.24 or later.
- For 2.0, request the fixed build from IBM and schedule the upgrade.
- Until patched, restrict access to the Planning Analytics and Workspace web interfaces to internal networks or VPN.
- Review access logs for unusual authentication or privilege changes.
- Verify the CVSS score against NVD and the IBM Security Bulletin.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- IBM Security Bulletin www.ibm.com
- CVE record mirror (threatint) cve.threatint.com
- IBM bulletin mirror (imfht) cve.imfht.com
- HOL advisory hol.org
- Strix CVE details www.strix.ai
- TheHackerWire www.thehackerwire.com
- Vulners VulnRichment vulners.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 30 Oct 2026, 19:08.
Original description (NVD)
IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privileges due to improper validation of sub-requests.
NVD references (1)
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.