CVE-2019-4411 in Cognos Controller

الملخص

بحسب MITRE

IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, and 10.4.1 could allow an authenticated user to obtain sensitive information due to easy to guess session identifier names. IBM X-Force ID: 162658.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• مسؤول: IBM Corporation
• حجز: 03/01/2019
• الاعتدال: تمت الموافقة
• إدخال: VDB-145274
• CPE: جاهز
• CWE: CWE-200 (مؤكد)
• CVSS: 4.3 (NVD)
• EPSS: 0.00816
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Lawfirm, Energy, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-4411
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-4411
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-4411/