CVE-2023-35009

Опубликовано: 16 авг. 2023

Источник: nvd

CVSS3: 5.3

EPSS Низкий

Описание

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a remote attacker to obtain system information without authentication which could be used in reconnaissance to gather information that could be used for future attacks. IBM X-Force ID: 257703.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/257703
VDB Entry
Vendor Advisory
https://security.netapp.com/advisory/ntap-20230831-0014/
https://security.netapp.com/advisory/ntap-20240621-0005/
https://www.ibm.com/support/pages/node/7026692
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/257703
VDB Entry
Vendor Advisory
https://security.netapp.com/advisory/ntap-20230831-0014/
https://security.netapp.com/advisory/ntap-20240621-0005/
https://www.ibm.com/support/pages/node/7026692
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:cognos_analytics:*:*:*:*:*:*:*:*

Версия от 11.1.0 (включая) до 11.1.7 (исключая)

cpe:2.3:a:ibm:cognos_analytics:*:*:*:*:*:*:*:*

Версия от 11.2.0 (включая) до 11.2.4 (исключая)

cpe:2.3:a:ibm:cognos_analytics:11.1.7:-:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.1.7:interimfix1:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.1.7:interimfix2:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.1.7:interimfix3:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.1.7:interimfix4:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.1.7:interimfix5:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.1.7:interimfix6:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.1.7:interimfix7:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.1.7:interimfix8:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.1.7:interimfix9:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.2.4:-:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.2.4:fixpack1:*:*:*:*:*:*

EPSS

Процентиль: 18%

0.00059

Низкий

5.3 Medium

CVSS3

Дефекты

CWE-209

Связанные уязвимости

GHSA-v74q-jm4w-2vq4