CVE-2021-20470

Опубликовано: 03 дек. 2021

Источник: nvd

CVSS3: 5.9

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

IBM Cognos Analytics 11.1.7 and 11.2.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 196339.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/196939
VDB Entry
Vendor Advisory
https://security.netapp.com/advisory/ntap-20211223-0006/
Third Party Advisory
https://www.ibm.com/support/pages/node/6520510
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/196939
VDB Entry
Vendor Advisory
https://security.netapp.com/advisory/ntap-20211223-0006/
Third Party Advisory
https://www.ibm.com/support/pages/node/6520510
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:cognos_analytics:*:*:*:*:*:*:*:*

Версия от 11.1.0 (включая) до 11.1.7 (исключая)

cpe:2.3:a:ibm:cognos_analytics:11.1.7:-:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.1.7:fixpack1:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.1.7:fixpack2:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.1.7:fixpack3:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.2.0:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*

EPSS

Процентиль: 49%

0.00256

Низкий

5.9 Medium

CVSS3

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-521

Связанные уязвимости

GHSA-whcp-cmr3-4vgp

github

около 4 лет назад

IBM Cognos Analytics 11.1.7 and 11.2.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 196339.

EPSS

Процентиль: 49%

0.00256

Низкий

5.9 Medium

CVSS3

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-521