Information disclosure

2022-12-1921:15:00

PRIOn knowledge base

www.prio-n.com

ibm cognos analytics

sensitive information exposure

api keys

log files

security vulnerability

ibm x-force id

nvd

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.9%

JSON

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could be vulnerable to sensitive information exposure by passing API keys to log files. If these keys contain sensitive information, it could lead to further attacks. IBM X-Force ID: 240450.

CPENameOperatorVersion
cognos_analyticseq11.1.7
cognos_analyticsge11.1.0
cognos_analyticslt11.1.7
cognos_analyticseq11.1.7 fixpack1
cognos_analyticseq11.1.7 fixpack2
cognos_analyticseq11.1.7 fixpack3
cognos_analyticseq11.1.7 fixpack4
cognos_analyticsge11.2.0
cognos_analyticsle11.2.3
cognos_analyticseq11.1.7 fixpack5

Name	Operator	Version
cognos_analytics	eq	11.1.7
cognos_analytics	ge	11.1.0
cognos_analytics	lt	11.1.7
cognos_analytics	eq	11.1.7 fixpack1
cognos_analytics	eq	11.1.7 fixpack2
cognos_analytics	eq	11.1.7 fixpack3
cognos_analytics	eq	11.1.7 fixpack4
cognos_analytics	ge	11.2.0
cognos_analytics	le	11.2.3
cognos_analytics	eq	11.1.7 fixpack5