PT-2019-16953 · Ibm · Ibm Cognos Analytics

Publicado 2019-04-15 · Atualizado 2019-05-09 · CVE-2019-4178

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions IBM Cognos Analytics version 11

Description The issue allows a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to write or view arbitrary files on the system.

Recommendations For IBM Cognos Analytics version 11, apply the fix provided by IBM to prevent directory traversal attacks. As a temporary workaround, consider restricting access to sensitive files and directories until the issue is resolved.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2019-4178

Produtos afetados

Ibm Cognos Analytics

Referências · 5

• http://ibm.com/support/docview.wss?uid=ibm10879079 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-4178 · Nota de Segurança
• https://security.netapp.com/advisory/ntap-20190509-0004 · Nota
• https://osv.dev/vulnerability/CVE-2019-4178 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/158919 · Aviso do Fabricante