CVE-2014-0863 in Cognos TM1
Summary
The client in IBM Cognos TM1 9.5.2.3 before IF5, 10.1.1.2 before IF1, 10.2.0.2 before IF1, and 10.2.2.0 before IF1 stores obfuscated passwords in memory, which allows remote authenticated users to obtain sensitive cleartext information via an unspecified security tool.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
01/06/2014
Disclosure
09/04/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 67454 | IBM Cognos TM1 Memory credentials management | 255 | Not defined | Official fix | CVE-2014-0863 |