Lucene search
PRIOn knowledge basePRION:CVE-2019-4173HistoryJun 17, 2019 - 3:15 p.m.
Design/Logic Flaw
2019-06-1715:15:00
PRIOn knowledge base
www.prio-n.com
7
IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 could allow a remote attacker to obtain sensitive information, caused by a flaw in the HTTP OPTIONS method, aka Optionsbleed. By sending an OPTIONS HTTP request, a remote attacker could exploit this vulnerability to read secret data from process memory and obtain sensitive information. IBM X-Force ID: 158878.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cognos_controller | eq | 10.2.1 | |
| cognos_controller | eq | 10.3.0 | |
| cognos_controller | eq | 10.3.1 | |
| cognos_controller | eq | 10.4.0 | |
| cognos_controller | eq | 10.2.0 |
Related
nvd
nvd
CVE-2019-4173
2019-06-17 15:15:12
cvelist
cvelist
CVE-2019-4173
2019-06-13 00:00:00
cve
cve
CVE-2019-4173
2019-06-17 15:15:12
