CVE-2018-1842

IBM Cognos Analytics 11 Configuration tool, under certain circumstances, will bypass OIDC namespace signature verification on its id_token

Low · published November 9, 2018

CVSS v3.0
3.6
EPSS
0%
Percentile
17.2
In the wild
Unconfirmed
What it is

IBM Cognos Analytics 11 Configuration tool, under certain circumstances, will bypass OIDC namespace signature verification on its id_token. IBM X-Force ID: 150902.

The record
Technical detail
CVSS v3.0
3.6 · LOW
Vector
CVSS:3.0/A:N/AC:H/AV:L/C:L/I:L/PR:L/S:U/UI:N/E:U/RC:C/RL:O
CVSS v4.0
Not supplied
EPSS
0.00263 · 17.2th percentile
Published
2018-11-09T00:00Z
EPSS history
Timeline
  • 09 NOV 00:00Z
    IBM Cognos Analytics 11 Configuration tool, under certain circumstances, will bypass OIDC namespace signature verification on its id_token
    cvelistv5