PT-2017-10412 · Ibm · Ibm Cognos Server

Published 2017-03-08 · Updated 2017-03-22 · CVE-2016-9985

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Cognos Server versions 10.1.1 through 10.2

Description The issue concerns the storage of highly sensitive information in log files by the affected software, which could be accessed by a local user.

Recommendations For versions 10.1.1 through 10.2, consider restricting access to log files to minimize the risk of sensitive information disclosure.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2016-9985

Affected Products

Ibm Cognos Server

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2016-9985 · Security Note
• https://osv.dev/vulnerability/CVE-2016-9985 · Vendor Advisory
• http://ibm.com/support/docview.wss?uid=swg21999671 · Vendor Advisory
• http://securityfocus.com/bid/96962 · Note