CVE-2022-43887

🗓️ 19 Dec 2022 21:10:15Reported by ibmType

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 sensitive information exposure via API keys in log file

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2022-43887 IBM Cognos Analytics information disclosure	19 Dec 202220:27	–	cvelist
Prion	Information disclosure	19 Dec 202221:15	–	prion
CNVD	IBM Cognos Analytics Sensitive Information Disclosure Vulnerability (CNVD-2022-91131)	21 Dec 202200:00	–	cnvd
NVD	CVE-2022-43887	19 Dec 202221:15	–	nvd
Tenable Nessus	IBM Cognos Analytics Multiple Vulnerabilities (6841801)	5 Jan 202300:00	–	nessus
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities (CVE-2021-29469, CVE-2022-39160, CVE-2022-38708, CVE-2022-42003, CVE-2022-42004, CVE-2022-43883, CVE-2022-43887, CVE-2022-25647, CVE-2022-36364)	10 Mar 202323:31	–	ibm

Nvd

Vulners

Node

ibm cognos_analyticsRange11.1.0–11.1.7

ibm cognos_analyticsRange11.2.0–11.2.3

ibm cognos_analyticsMatch11.1.7-

ibm cognos_analyticsMatch11.1.7fixpack1

ibm cognos_analyticsMatch11.1.7fixpack2

ibm cognos_analyticsMatch11.1.7fixpack3

ibm cognos_analyticsMatch11.1.7fixpack4

ibm cognos_analyticsMatch11.1.7fixpack5

[
  {
    "defaultStatus": "unaffected",
    "product": "Cognos Analytics",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "11.1.7, 11.2.0, 11.2.1"
      }
    ]
  }
]

Source	Link
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/240450
ibm	www.ibm.com/support/pages/node/6841801

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

19 Dec 2022 21:15Current

5Medium risk

Vulners AI Score5

CVSS35.3

EPSS0.00065

CWE-532