Skip to content
OpenAdvisories
Low · 3.7 CVE-2019-4412 EUVD-2019-14019GHSA-m352-jqmr-863r

IBM Cognos Controller stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have …

Published Nov 9, 2019 · Updated Sep 16, 2024 · Assigned by ibm

Vendor: IBM Product: Cognos Controller

Description

IBM Cognos Controller stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 162659.

Affected products

VendorProductAffectedFixed
IBM Cognos Controller 10.3.1, 10.3.0, 10.4.0, 10.4.1 —

References