PT-2021-18526 · Ibm · Ibm Cognos Analytics

Published 2021-12-03 · Updated 2022-07-12 · CVE-2021-29867

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM Cognos Analytics versions 11.1.7 through 11.2.0

Description The issue allows an authenticated user to view or edit a Jupyter notebook that they should not have access to.

Recommendations For IBM Cognos Analytics versions 11.1.7 through 11.2.0, consider restricting access to Jupyter notebooks to minimize the risk of unauthorized viewing or editing until a patch is available.

Fix

Related Identifiers

CVE-2021-29867

Affected Products

Ibm Cognos Analytics

References · 6

• https://osv.dev/vulnerability/CVE-2021-29867 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/206212 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-29867 · Security Note
• https://ibm.com/support/pages/node/6520510 · Vendor Advisory
• https://t.me/cibsecurity/33323 · Telegram Post
• https://security.netapp.com/advisory/ntap-20211223-0006 · Note