CVE-2022-22339: 
IBM Planning Analytics vulnerability analysis and mitigation

IBM Planning Analytics 2.0 was found to be vulnerable to server-side request forgery (SSRF). This vulnerability, identified as CVE-2022-22339, allows authenticated attackers to send unauthorized requests from the system. The vulnerability was discovered and reported to IBM, and was assigned IBM X-Force ID: 219736 (IBM Advisory).

The vulnerability has been assessed with a CVSS v3.0 Base Score of 6.5 MEDIUM with the vector string: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L. The vulnerability exists in the system's request handling mechanism, which could allow authenticated users to send unauthorized requests from the system (IBM Advisory).

The successful exploitation of this vulnerability could lead to network enumeration and potentially facilitate other attacks. The vulnerability affects the system's security by allowing unauthorized requests to be sent from the compromised system (IBM Advisory).

The vulnerability requires authentication for exploitation. While the attack complexity is considered low, an attacker must first have valid authentication credentials to exploit this vulnerability (IBM Advisory).

IBM has released a security update to address this vulnerability. Users are strongly recommended to upgrade to IBM Planning Analytics Local v2.0 - Planning Analytics Workspace Release 74 or later. The vulnerability has been addressed in IBM Planning Analytics with Watson, requiring no further action for cloud users (IBM Advisory).