Medium · 4.0 CVE-2022-38707 EUVD-2022-41276GHSA-mxg5-g3q7-ffx3

IBM Cognos Command Center information disclosure

Published May 5, 2023 · Updated Jan 29, 2025 · Assigned by ibm

Vendor: IBM Product: Cognos Command Center

Description

IBM Cognos Command Center 10.2.4.1 could allow a local attacker to obtain sensitive information due to insufficient session expiration. IBM X-Force ID: 234179.

Affected products

Vendor	Product	Affected	Fixed
IBM	Cognos Command Center	10.2.4.1	—

References

https://www.ibm.com/support/pages/node/6983274 vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/234179 vdb-entry