CVE-2017-1125 — Sensitive Information Exposure in IBM Cognos Business Intelligence

CWE-200 — Sensitive Information Exposure4 documents4 sources
Severity
3.3LOWNVD
EPSS
0.1%
top 83.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Cognos Business IntelligenceIBM Cognos Business Intelligence Server
Timeline
PublishedJun 7
Latest updateMay 17

Description

IBM Cognos Analytics 10.1 and 10.2 could allow a local user to craft a URL which could confirm the existence of and expose postial contents of a file. IBM X-Force ID: 121340.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 1.8 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5ibm/cognos_business_intelligence5 versions+4

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-c69g-rq53-jjpm: IBM Cognos Analytics 10↗2022-05-17
▶
CVEList
CVE-2017-1125: IBM Cognos Analytics 10↗2017-06-07
▶

💥Exploits & PoCs

1
Exploit-DB
Apple macOS/iOS Kernel 10.12.3 (16D32) - 'bpf' Heap Overflow↗2017-04-04
▶
CVE-2017-1125 — Sensitive Information Exposure in IBM | cvebase