PT-2017-10412 · Ibm · Ibm Cognos Server

Publicado 2017-03-08 · Atualizado 2017-03-22 · CVE-2016-9985

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Cognos Server versions 10.1.1 through 10.2

Description The issue concerns the storage of highly sensitive information in log files by the affected software, which could be accessed by a local user.

Recommendations For versions 10.1.1 through 10.2, consider restricting access to log files to minimize the risk of sensitive information disclosure.

Correção

Insertion into Log File

Enumeração de Fraquezas

CWE-532

Identificadores relacionados

CVE-2016-9985

Produtos afetados

Ibm Cognos Server

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2016-9985 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-9985 · Aviso do Fabricante
• http://securityfocus.com/bid/96962 · Nota
• http://ibm.com/support/docview.wss?uid=swg21999671 · Aviso do Fabricante