PT-2019-16954 · Ibm · Ibm Cognos Analytics

Published 2019-09-17 · Updated 2023-02-23 · CVE-2019-4183

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions IBM Cognos Analytics versions 11.0 through 11.1

Description The issue allows a remote user to send specially crafted requests that could consume all available CPU and memory resources, resulting in a denial of service attack.

Recommendations For versions 11.0 and 11.1, apply the recommended fix from IBM to prevent denial of service attacks.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2019-4183

Affected Products

Ibm Cognos Analytics

References · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/158973 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-4183 · Vendor Advisory
• https://ibm.com/support/pages/node/1073530 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-4183 · Security Note
• https://security.netapp.com/advisory/ntap-20191009-0001 · Note