CVE-2019-4178

IBM Cognos Analytics 11 could allow a remote attacker to traverse directories on the system

Medium · published April 15, 2019

CVSS v3.0
6.4
EPSS
3%
Percentile
87.5
In the wild
Unconfirmed
What it is

IBM Cognos Analytics 11 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to write or view arbitrary files on the system. IBM X-Force ID: 158919.

The record
Technical detail
CVSS v3.0
6.4 · MEDIUM
Vector
CVSS:3.0/I:H/C:L/UI:N/AC:H/PR:L/A:L/S:U/AV:N/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.03067 · 87.5th percentile
Published
2019-04-15T14:55Z
EPSS history
Timeline
  • 15 APR 14:55Z
    IBM Cognos Analytics 11 could allow a remote attacker to traverse directories on the system
    cvelistv5