CVE-2021-39080

3 documents3 sources
Severity
6.5MEDIUM
EPSS
0.1%
top 66.66%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Cognos Analytics Mobile
Timeline
PublishedFeb 14
Latest updateFeb 15

Description

Due to weak obfuscation, IBM Cognos Analytics Mobile for Android application prior to version 1.1.14 , an attacker could be able to reverse engineer the codebase to gain knowledge about the programming technique, interface, class definitions, algorithms and functions used. IBM X-Force ID: 215593.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:NExploitability: 3.9 | Impact: 2.5

Affected Packages2 packages

▶NVDibm/cognos_analytics_mobile1.1.0 — 1.1.14

🔴Vulnerability Details

2
GHSA
GHSA-cqgh-xhcv-j4v8: Due to weak obfuscation, IBM Cognos Analytics Mobile for Android application prior to version 1↗2022-02-15
▶
CVEList
CVE-2021-39080: Due to weak obfuscation, IBM Cognos Analytics Mobile for Android application prior to version 1↗2022-02-14
▶
CVE-2021-39080 (MEDIUM CVSS 6.5) | Due to weak obfuscation | cvebase.io