IBM Planning Analytics Encryption Problem Vulnerability (CNVD-2023-68783)

IBM Planning Analytics is a suite of business planning analytics solutions from International Business Machines (IBM). The solution supports automated execution of processes such as business planning, budgeting and analysis. Planning Analytics Cartridge for Cloud Pak for Data version v4.0 suffers from an encryption issue vulnerability that stems from an insecure password policy on the CouchDB server, which can be exploited by an attacker to collect sensitive information from the database.