CVE-2020-4649

IBM Planning Analytics Local 2.0.9.2 and IBM Planning Analytics Workspace 57 could expose data to non-privleged users by not invalidating TM1Web user sessions. IBM X-Force ID: 186022.

• CWE-200

• https://exchange.xforce.ibmcloud.com/vulnerabilities/186022VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/6356539Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/186022VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/6356539Patch, Vendor Advisory

Published

Nov 3, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-4643IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is v…7.5
• CVE-2020-4644IBM Planning Analytics Local 2.0.0 through 2.0.9.1 could all…5.4
• CVE-2020-4645IBM Planning Analytics Local 2.0.0 through 2.0.9.1 is vulner…5.4
• CVE-2020-4646IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through…4.3
• CVE-2020-4647IBM Sterling File Gateway 2.2.0.0 through 2.2.6.5 and 6.0.0.…8.8
• CVE-2020-4648A vulnerability exsists in IBM Planning Analytics 2.0 whereb…6.5
• CVE-2020-4650IBM Maximo Spatial Asset Management 7.6.0.3, 7.6.0.4, 7.6.0.…3.3
• CVE-2020-4651IBM Maximo Spatial Asset Management 7.6.0.3, 7.6.0.4, 7.6.0.…4.8
• CVE-2020-4653IBM Planning Analytics 2.0 could allow a remote attacker to …6.1
• CVE-2020-4654IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allo…6.5
• CVE-2020-4655IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through…8.8
• CVE-2020-4657IBM Sterling B2B Integrator 5.2.0.0 through 6.0.3.2 Standard…6.1