CVE-2019-4471

IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure flag for a sensitive…

Medium · published May 31, 2021

CVSS v3.0
5.3
EPSS
1%
Percentile
63.9
In the wild
Unconfirmed
What it is

IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure flag for a sensitive cookie in an HTTPS session. A remote attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 163780.

The record
Technical detail
CVSS v3.0
5.3 · MEDIUM
Vector
CVSS:3.0/PR:L/C:H/I:N/S:U/AC:H/A:N/UI:N/AV:N/RC:C/E:U/RL:O
CVSS v4.0
Not supplied
EPSS
0.01049 · 63.9th percentile
Published
2021-05-31T15:10Z
EPSS history
Timeline
  • 31 MAY 15:10Z
    IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure flag for a sensitive…
    cvelistv5