Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-77510
HistoryNov 06, 2022 - 12:00 a.m.

IBM Cognos Analytics Information Disclosure Vulnerability (CNVD-2022-77510)

2022-11-0600:00:00
China National Vulnerability Database
www.cnvd.org.cn
8

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

IBM Cognos Analytics is a suite of business intelligence software from IBM Corporation. The software includes reports, dashboards, and scorecards, and can help companies make adjustments to their decisions by analyzing key factors and key people, etc. An information disclosure vulnerability exists in IBM Cognos Analytics, which stems from the program storing user credentials in cleartext. An authenticated attacker could read the credentials stored in plaintext.

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Related for CNVD-2022-77510