5.3

CVE-2022-43887

IBM Cognos Analytics information disclosure

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could be vulnerable to sensitive information exposure by passing API keys to log files. If these keys contain sensitive information, it could lead to further attacks. IBM X-Force ID: 240450.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Cognos Analytics Version >= 11.1.0 < 11.1.7
Ibm ≫ Cognos Analytics Version >= 11.2.0 <= 11.2.3
Ibm ≫ Cognos Analytics Version 11.1.7 Update -
Ibm ≫ Cognos Analytics Version 11.1.7 Update fixpack1
Ibm ≫ Cognos Analytics Version 11.1.7 Update fixpack2
Ibm ≫ Cognos Analytics Version 11.1.7 Update fixpack3
Ibm ≫ Cognos Analytics Version 11.1.7 Update fixpack4
Ibm ≫ Cognos Analytics Version 11.1.7 Update fixpack5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.53% 0.403
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
IBM 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CWE-532 Insertion of Sensitive Information into Log File

The product writes sensitive information to a log file.

https://www.ibm.com/support/pages/node/6841801
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/240450
Vendor Advisory
VDB Entry