CVE-2021-36770

CVE-2021-36770 affects IBM Cognos Analytics. The IBM bulletin notes a local privilege-escalation via an untrusted search path in the Perl Encode module (Encode::ConfigLocal) loaded from the current working directory, preempting dynamic module loading. Exploitation requires an unusual configuratio...