4.3
CVE-2024-31899
- EPSS 0.18%
- Veröffentlicht 26.09.2024 14:15:08
- Zuletzt bearbeitet 07.01.2025 20:02:40
- Quelle psirt@us.ibm.com
- CVE-Watchlists
- Unerledigt
LoginIBM Cognos Command Center information disclosure
IBM Cognos Command Center 10.2.4.1 and 10.2.5 could disclose highly sensitive user information to an authenticated user with physical access to the device.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Cognos Command Center Version10.2.4.1
Ibm ≫ Cognos Command Center Version10.2.5
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.18% | 0.082 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 0.7 | 3.6 |
CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
|
| psirt@us.ibm.com | 4.3 | 0.7 | 3.6 |
CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
|
CWE-256 Plaintext Storage of a Password
The product stores a password in plaintext within resources such as memory or files.
CWE-522 Insufficiently Protected Credentials
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
https://www.ibm.com/support/pages/node/7149734