CVE-2025-33005

published 2025-06-01

CVE-2025-33005: IBM Planning Analytics Local 2.0 and 2.1 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the…

high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

IBM Planning Analytics Local 2.0 and 2.1 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
ibm	planning_analytics_local	—	—
ibm	planning_analytics_local	—	—
ibm	planning_analytics_local	—	—
ibm	planning_analytics_local	—	—

CWE-613