CVE-2019-4411

IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, and 10.4.1 could allow an authenticated user to obtain sensitive information due to easy to guess session…

Medium · published November 9, 2019

CVSS v3.0
4.3
EPSS
1%
Percentile
56.7
In the wild
Unconfirmed
What it is

IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, and 10.4.1 could allow an authenticated user to obtain sensitive information due to easy to guess session identifier names. IBM X-Force ID: 162658.

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/UI:N/PR:L/I:N/S:U/AV:N/AC:L/A:N/C:L/RC:C/RL:O/E:U
CVSS v4.0
Not supplied
EPSS
0.00816 · 56.7th percentile
Published
2019-11-09T01:41Z
EPSS history
Timeline
  • 09 NOV 01:41Z
    IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, and 10.4.1 could allow an authenticated user to obtain sensitive information due to easy to guess session…
    cvelistv5