Lucene search
China National Vulnerability DatabaseCNVD-2022-91131HistoryDec 21, 2022 - 12:00 a.m.
IBM Cognos Analytics Sensitive Information Disclosure Vulnerability (CNVD-2022-91131)
2022-12-2100:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
ibm cognos analytics
sensitive information disclosure
vulnerability
versions 11.1.7
11.2.0
11.2.1
api key
log file
0.001 Low
EPSS
Percentile
25.9%
IBM Cognos Analytics is a suite of business intelligence software from IBM Corporation in the United States. IBM Cognos Analytics 11.1.7, 11.2.0 and 11.2.1 versions contain a sensitive information disclosure vulnerability. An attacker could exploit the vulnerability to cause sensitive information disclosure by passing an API key to a log file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm ibm cognos analytics | eq | 11.1.7 | |
| ibm ibm cognos analytics | eq | 11.2.0 | |
| ibm ibm cognos analytics | eq | 11.2.1 |
Related
cvelist
cvelist
CVE-2022-43887 IBM Cognos Analytics information disclosure
2022-12-19 20:27:09
nvd
nvd
CVE-2022-43887
2022-12-19 21:15:10
cve
cve
CVE-2022-43887
2022-12-19 21:15:10
prion
prion
Information disclosure
2022-12-19 21:15:00
nessus
nessus
IBM Cognos Analytics Multiple Vulnerabilities (6841801)
2023-01-05 00:00:00
