CVE-2021-20580: 
IBM Planning Analytics vulnerability analysis and mitigation

IBM Planning Analytics 2.0 was found to be vulnerable to cross-site request forgery (CSRF). The vulnerability, identified as CVE-2021-20580, could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. This vulnerability was disclosed on June 28, 2021 (IBM Support).

The vulnerability has been assigned a CVSS Base score of 4.3 with the vector (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N). This indicates that the vulnerability requires network access and user interaction to exploit, with potential impact limited to integrity (IBM Support).

A successful exploitation of this vulnerability could allow attackers to execute malicious and unauthorized actions through a trusted user's session. The impact is primarily focused on integrity, with no direct effect on confidentiality or availability (IBM Support).

The vulnerability requires network access and user interaction for successful exploitation. An attacker would need to trick a trusted user into performing specific actions to execute the CSRF attack (IBM Support).

IBM has addressed this vulnerability in IBM Planning Analytics Local v2.0 - Planning Analytics Workspace Release 65. Users are recommended to apply this security update which can be downloaded from Fix Central. For IBM Planning Analytics Cloud users, the vulnerability has already been addressed and no further action is required (IBM Support).