CVE-2022-43887

published 2022-12-19

CVE-2022-43887: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could be vulnerable to sensitive information exposure by passing API keys to log files. If these keys contain…

Priority P4 25 medium 5.3 CVSS 3.1

AV N AC L PR N UI N S U C L I N A N

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could be vulnerable to sensitive information exposure by passing API keys to log files. If these keys contain sensitive information, it could lead to further attacks. IBM X-Force ID: 240450.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
ibm	cognos_analytics	—	—
ibm	cognos_analytics	—	—
ibm	cognos_analytics	>= 11.1.0 < 11.1.7	11.1.7
ibm	cognos_analytics	11.2.0 – 11.2.3	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-532