{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2019-4716/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2019-4716/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2019-4716/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2019-4716/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2019-4716/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2019-4716"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2019-4716"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2019/CVE-2019-4716.yaml",
    "nuclei_template_severity": "critical",
    "nuclei_template_yaml": "id: CVE-2019-4716\n\ninfo:\n  name: IBM Planning Analytics - Authentication Bypass & Remote Code Execution Version Detection\n  author: 0x_Akoko\n  severity: critical\n  description: |\n    IBM Planning Analytics versions 2.0.0 through 2.0.8 are vulnerable to a configuration overwrite that allows an unauthenticated user to login as \"admin\", and then execute code as root or SYSTEM via TM1 scripting.\n  impact: |\n    Attackers can gain admin access and execute arbitrary code with SYSTEM privileges, leading to full system compromise.\n  remediation: |\n    Update to the latest version or 2.0.9 or apply the security patches provided by IBM.\n  reference:\n    - https://www.ibm.com/support/pages/node/1127781\n    - https://nvd.nist.gov/vuln/detail/CVE-2019-4716\n    - http://packetstormsecurity.com/files/156953/IBM-Cognos-TM1-IBM-Planning-Analytics-Server-Configuration-Overwrite-Code-Execution.html\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2019-4716\n    cwe-id: CWE-94\n    epss-score: 0.86441\n    epss-percentile: 0.99727\n    cpe: cpe:2.3:a:ibm:planning_analytics:*:*:*:*:*:*:*:*\n  metadata:\n    verified: true\n    max-request: 1\n    vendor: ibm\n    product: planning_analytics\n    shodan-query: title:\"Arc for TM1\"\n  tags: cve,cve2019,ibm,planning_analytics,passive,kev,vkev,vuln\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}\"\n\n    host-redirects: true\n    max-redirects: 2\n\n    matchers:\n      - type: dsl\n        dsl:\n          - 'contains_any(body, \"IBM Planning Analytics\",\"IBM Cognos TM1\")'\n          - \"compare_versions(version, '>= 2.0.0') && compare_versions(version, '<= 2.0.8')\"\n          - 'status_code == 200'\n        condition: and\n\n    extractors:\n      - type: regex\n        part: body\n        name: version\n        group: 1\n        regex:\n          - 'var appVersion = \"([0-9.]+)\";'\n# digest: 490a004630440220324112cd85ec56903a7771fe5943679e98a35df9ab0cdc64616a4f02248b5621022002178f3263b525b76fccb12df4bbe2a763d49b59b80c0ef04840823bf628884b:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2019-4716"
}