low3.3
CVE-2017-1125
IBM Cognos Analytics 10.1 and 10.2 could allow a local user to craft a URL which could confirm the existence of and expose postial contents of a file.
Impact
IBM Cognos Analytics 10.1 and 10.2 could allow a local user to craft a URL which could confirm the existence of and expose postial contents of a file. IBM X-Force ID: 121340.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Cognos Business Intelligence Server | Versions 10.1.1, 10.2.0, 10.2.1, 10.2.1.1, 10.2.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.ibm.com/support/docview.wss?uid=swg22004036
- http://www.securityfocus.com/bid/98945
- https://exchange.xforce.ibmcloud.com/vulnerabilities/121340
- http://www.ibm.com/support/docview.wss?uid=swg22004036
- http://www.securityfocus.com/bid/98945
- https://exchange.xforce.ibmcloud.com/vulnerabilities/121340