CVE-2024-31899CWE-256

IBM Cognos Command Center information disclosure

Medium · published September 26, 2024

CVSS v3.1
4.3
EPSS
0%
Percentile
7.6
In the wild
Unconfirmed
What it is

IBM Cognos Command Center 10.2.4.1 and 10.2.5 could disclose highly sensitive user information to an authenticated user with physical access to the device.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00184 · 7.6th percentile
Weakness
CWE-256 · Plaintext Storage of a Password
Published
2024-09-26T13:34Z
EPSS history
Timeline
  • 26 SEP 13:34Z
    IBM Cognos Command Center information disclosure
    cvelistv5