CVE-2016-3037

Опубликовано: 17 апр. 2017

Источник: nvd

CVSS3: 5.7

CVSS2: 3.5

EPSS Низкий

Описание

IBM Cognos TM1 10.1 and 10.2 provides a service to return the victim's password with a valid session key. An authenticated attacker with user interaction could obtain this sensitive information. IBM X-Force ID: 114613.

Ссылки

http://www.ibm.com/support/docview.wss?uid=swg21999649
Patch
Vendor Advisory
http://www.securityfocus.com/bid/97917
Third Party Advisory
VDB Entry
http://www.ibm.com/support/docview.wss?uid=swg21999649
Patch
Vendor Advisory
http://www.securityfocus.com/bid/97917
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:cognos_business_intelligence:10.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_business_intelligence:10.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_business_intelligence:10.2.2:*:*:*:*:*:*:*

EPSS

Процентиль: 50%

0.00266

Низкий

5.7 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-fj22-j2fg-9f28