IBM Cognos Controller
En bref
- Source
- NVD
- EPSS
- EPSS 1.44 % · centile 73 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- ibm
- Statut NVD
- Modified
Rechercher sur…
Description
A low level user of IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, 10.4.1, and 10.4.2 who has Administration rights to the server where the application is installed, can escalate their privilege from Low level to Super Admin and gain access to Create/Update/Delete any level of user in Cognos Controller. IBM X-Force ID: 186625.
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.0 | HIGH 8.0 | CVSS:3.0/S:C/I:H/C:H/AC:H/A:H/PR:H/UI:N/AV:N/RL:O/RC:C/E:U | ibm |
| CVSS 3.1 | HIGH 7.2 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H | NVD · nvd@nist.gov (Primary) |
| CVSS 3.0 | HIGH 8.0 | CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H | NVD · psirt@us.ibm.com (Secondary) |
| CVSS 2.0 | MEDIUM 6.5 | AV:N/AC:L/Au:S/C:P/I:P/A:P | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2020-25932
- GCVE · GCVE-0-2020-4685
Configurations affectées (CPE NVD)
cpe:2.3:a:ibm:cognos_controller:10.3.0:*:*:*:*:*:*:*cpe:2.3:a:ibm:cognos_controller:10.3.1:*:*:*:*:*:*:*cpe:2.3:a:ibm:cognos_controller:10.4.0:*:*:*:*:*:*:*cpe:2.3:a:ibm:cognos_controller:10.4.1:*:*:*:*:*:*:*cpe:2.3:a:ibm:cognos_controller:10.4.2:*:*:*:*:*:*:*
Produits affectés
| Produit | Versions |
|---|---|
| IBM · Cognos Controller | affected 10.3.1 ; affected 10.3.0 ; affected 10.4.0 ; affected 10.4.1 ; affected 10.4.2 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |