Lucene search
HistoryDec 19, 2022 - 9:15 p.m.
CVE-2022-43887
ibm
cognos analytics
sensitive information
exposure
api keys
log files
attacks
x-force id 240450
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
25.9%
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could be vulnerable to sensitive information exposure by passing API keys to log files. If these keys contain sensitive information, it could lead to further attacks. IBM X-Force ID: 240450.
Affected configurations
Node
ibmcognos_analyticsRange11.1.0–11.1.7
ORibmcognos_analyticsRange11.2.0–11.2.3
ORibmcognos_analyticsMatch11.1.7-
ORibmcognos_analyticsMatch11.1.7fixpack1
ORibmcognos_analyticsMatch11.1.7fixpack2
ORibmcognos_analyticsMatch11.1.7fixpack3
ORibmcognos_analyticsMatch11.1.7fixpack4
ORibmcognos_analyticsMatch11.1.7fixpack5
Related
cvelist
cvelist
CVE-2022-43887 IBM Cognos Analytics information disclosure
2022-12-19 20:27:09
cnvd
cnvd
cve
cve
CVE-2022-43887
2022-12-19 21:15:10
prion
prion
Information disclosure
2022-12-19 21:15:00
nessus
nessus
IBM Cognos Analytics Multiple Vulnerabilities (6841801)
2023-01-05 00:00:00
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
25.9%
Related for NVD:CVE-2022-43887