CVE-2025-33005 - IBM Planning Analytics Local session fixation

Back Back to CVE browser

HIGH

IBM Planning Analytics Local session fixation

Published Jun 1, 2025

8.8

HIGH

CVSS 3.1

EPSS 0.25%

Description

IBM Planning Analytics Local 2.0 and 2.1 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.

Affected products

Vendor IBM Product Planning Analytics Local Default
unaffected
- Version
  2.0
  Status
  affected
  Constraints
  -
- Version
  2.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

Planning Analytics Local

unaffected

Version	Status	Constraints
2.0	affected	-
2.1	affected	-

Remediation

Vendor solution

It is strongly recommended that you apply the most recent security updates:

IBM Planning Analytics Local - IBM Planning Analytics Workspace 2.1 IBM Planning Analytics Local 2.1.11 is now available for download from Fix Central IBM Planning Analytics Local - IBM Planning Analytics Workspace 2.0 Download IBM Planning Analytics Local v2.0: Planning Analytics Workspace Release 104 from Fix Central

Weaknesses (1)

CWE-613