CVE-2021-38905

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow an authenticated user to view report pages that they should not have access to

Medium · published April 22, 2022

CVSS v3.0
4.3
EPSS
1%
Percentile
60.1
In the wild
Unconfirmed
What it is

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow an authenticated user to view report pages that they should not have access to. IBM X-Force ID: 209697.

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/I:N/AV:N/PR:L/S:U/AC:L/C:L/UI:N/A:N/RC:C/RL:O/E:U
CVSS v4.0
Not supplied
EPSS
0.00925 · 60.1th percentile
Published
2022-04-22T16:30Z
EPSS history
Timeline
  • 22 APR 16:30Z
    IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow an authenticated user to view report pages that they should not have access to
    cvelistv5