IBM Planning Analytics Local versions 2.1.0 through 2.1.14 contain a directory traversal vulnerability that allows a remote authenticated user to access arbitrary files on the system by sending specially crafted URL requests with absolute path sequences. This can lead to unauthorized viewing, reading, or writing of files.