CVE-2019-4613: 
IBM Planning Analytics vulnerability analysis and mitigation

IBM Planning Analytics 2.0 was identified with a Cross-Site Request Forgery (CSRF) vulnerability, tracked as CVE-2019-4613. The vulnerability was discovered and disclosed in early 2020, affecting the Planning Analytics Workspace component. This security flaw could potentially allow attackers to execute unauthorized actions through trusted users of the website (IBM Security Bulletin, NVD).

The vulnerability received a CVSS v3.1 base score of 4.3 (Medium) with the vector string CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N. This indicates that the vulnerability is network-accessible, requires low attack complexity, needs no privileges, but does require user interaction. The scope is unchanged, with low impact on integrity and no impact on confidentiality or availability (NVD).

If exploited, this CSRF vulnerability could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. The impact is primarily focused on integrity, with potential for unauthorized modifications to system data or operations (IBM Security Bulletin).

IBM addressed this vulnerability in IBM Planning Analytics Local v2.0 - Planning Analytics Workspace Release 48. Users are recommended to upgrade to this version as soon as practical. No temporary workarounds or mitigations were provided by IBM (IBM Security Bulletin).