CVE-2019-4411

Опубликовано: 09 нояб. 2019

Источник: nvd

CVSS3: 4.3

CVSS2: 4

EPSS Низкий

Описание

IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, and 10.4.1 could allow an authenticated user to obtain sensitive information due to easy to guess session identifier names. IBM X-Force ID: 162658.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/162658
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/1086123
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/162658
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/1086123
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:cognos_controller:10.3.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_controller:10.3.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_controller:10.4.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_controller:10.4.1:*:*:*:*:*:*:*

EPSS

Процентиль: 55%

0.00816

Низкий

4.3 Medium

CVSS3

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-330

Связанные уязвимости

GHSA-3wfq-h43q-w8hw

github

больше 4 лет назад

IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, and 10.4.1 could allow an authenticated user to obtain sensitive information due to easy to guess session identifier names. IBM X-Force ID: 162658.

EPSS

Процентиль: 55%

0.00816

Низкий

4.3 Medium

CVSS3

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-330