CVE-2021-29867

Опубликовано: 03 дек. 2021

Источник: nvd

CVSS3: 5.4

CVSS2: 5.5

EPSS Низкий

Описание

IBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated to view or edit a Jupyter notebook that they should not have access to. IBM X-Force ID: 206212.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/206212
VDB Entry
Vendor Advisory
https://security.netapp.com/advisory/ntap-20211223-0006/
Third Party Advisory
https://www.ibm.com/support/pages/node/6520510
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/206212
VDB Entry
Vendor Advisory
https://security.netapp.com/advisory/ntap-20211223-0006/
Third Party Advisory
https://www.ibm.com/support/pages/node/6520510
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:cognos_analytics:*:*:*:*:*:*:*:*

Версия от 11.1.0 (включая) до 11.1.7 (исключая)

cpe:2.3:a:ibm:cognos_analytics:11.1.7:-:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.1.7:fixpack1:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.1.7:fixpack2:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.1.7:fixpack3:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.2.0:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*

EPSS

Процентиль: 38%

0.00167

Низкий

5.4 Medium

CVSS3

5.4 Medium

CVSS3

5.5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-65hc-w5gc-vhhp

CVSS3: 5.4

github

около 4 лет назад

IBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated to view or edit a Jupyter notebook that they should not have access to. IBM X-Force ID: 206212.

EPSS

Процентиль: 38%

0.00167

Низкий

5.4 Medium

CVSS3

5.4 Medium

CVSS3

5.5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo