CVE-2022-43887

Опубликовано: 19 дек. 2022

Источник: nvd

CVSS3: 5.3

EPSS Низкий

Описание

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could be vulnerable to sensitive information exposure by passing API keys to log files. If these keys contain sensitive information, it could lead to further attacks. IBM X-Force ID: 240450.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/240450
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6841801
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/240450
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6841801
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:cognos_analytics:*:*:*:*:*:*:*:*

Версия от 11.1.0 (включая) до 11.1.7 (исключая)

cpe:2.3:a:ibm:cognos_analytics:*:*:*:*:*:*:*:*

Версия от 11.2.0 (включая) до 11.2.3 (включая)

cpe:2.3:a:ibm:cognos_analytics:11.1.7:-:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.1.7:fixpack1:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.1.7:fixpack2:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.1.7:fixpack3:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.1.7:fixpack4:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.1.7:fixpack5:*:*:*:*:*:*

EPSS

Процентиль: 32%

0.00125

Низкий

5.3 Medium

CVSS3

Дефекты

CWE-532

Связанные уязвимости

GHSA-8m88-r8cj-f72f