Medium · 4.3 CVE-2019-4411 EUVD-2019-14018GHSA-3wfq-h43q-w8hw

IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, and 10.4.1 could allow an authenticated user to obtain sensitive information due to easy to g…

Published Nov 9, 2019 · Updated Sep 17, 2024 · Assigned by ibm

Description

IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, and 10.4.1 could allow an authenticated user to obtain sensitive information due to easy to guess session identifier names. IBM X-Force ID: 162658.

Affected products

Vendor	Product	Affected	Fixed
IBM	Cognos Controller	10.3.1, 10.3.0, 10.4.0, 10.4.1	—

References

https://www.ibm.com/support/pages/node/1086123
ibm-cognos-cve20194411-info-disc (162658) vdb-entry