PT-2019-16953 · Ibm · Ibm Cognos Analytics

Published 2019-04-15 · Updated 2019-05-09 · CVE-2019-4178

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions IBM Cognos Analytics version 11

Description The issue allows a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to write or view arbitrary files on the system.

Recommendations For IBM Cognos Analytics version 11, apply the fix provided by IBM to prevent directory traversal attacks. As a temporary workaround, consider restricting access to sensitive files and directories until the issue is resolved.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2019-4178

Affected Products

Ibm Cognos Analytics

References · 5

• http://ibm.com/support/docview.wss?uid=ibm10879079 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-4178 · Security Note
• https://osv.dev/vulnerability/CVE-2019-4178 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/158919 · Vendor Advisory
• https://security.netapp.com/advisory/ntap-20190509-0004 · Note