PT-2018-5115 · Ibm · Ibm Predictive Solutions Foundation

Published 2018-03-22 · Updated 2019-10-09 · CVE-2016-9711

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Predictive Solutions Foundation (IBM Cognos Analytics) version 11.0

Description The issue reveals sensitive information in detailed error messages, which could aid an attacker in further attacks against the system.

Recommendations For IBM Predictive Solutions Foundation (IBM Cognos Analytics) version 11.0, consider disabling detailed error messages to minimize the risk of exploitation. Restrict access to error messages to prevent potential attackers from gaining sensitive information.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-9711

Affected Products

Ibm Predictive Solutions Foundation

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-9711 · Security Note
• https://osv.dev/vulnerability/CVE-2016-9711 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/119619 · Vendor Advisory
• http://ibm.com/support/docview.wss?uid=swg22014337 · Vendor Advisory
• http://securityfocus.com/bid/103495 · Note