CVE-2026-10545: Planning Analytics Local: açık yönlendirme

Açıklama (NVD)

IBM Planning Analytics Local 2.1.0 through 2.1.21 is vulnerable to an open redirect that allows an attacker to redirect users to arbitrary external websites via a crafted URL. If used in SSO authentication flows, this could result in exposure of session tokens and allow attackers to hijack user sessions.

Özet bilgiler

Ürün

Ibm Planning Analytics Local

CVSS v3.1

7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

%0,38 (yüzdelik 33)

CWE

CWE-601

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• www.ibm.com
• CWE-601