CVE-2021-29851: 
IBM Planning Analytics vulnerability analysis and mitigation

IBM Planning Analytics 2.0 is affected by a security vulnerability (CVE-2021-29851) that could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. The vulnerability was disclosed on August 31, 2021 and affects the Planning Analytics Workspace component (IBM Security).

The vulnerability has a CVSS Base score of 4.3 with a vector of (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N). This indicates that the vulnerability requires low attack complexity, requires low privileges, needs no user interaction, and can result in low confidentiality impact with no impact to integrity or availability (IBM Security).

The vulnerability could allow remote attackers to obtain sensitive information through stack trace exposure in the browser. The impact is limited to information disclosure with no compromise to system integrity or availability (IBM Security).

IBM has released a security update to address this vulnerability in IBM Planning Analytics Local v2.0 - Planning Analytics Workspace Release 67. Users are recommended to apply this update. The vulnerability has already been addressed in IBM Planning Analytics with Watson and requires no further action (IBM Security).