medium4.3
CVE-2021-38905
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow an authenticated user to view report pages that they should not have access to.
Impact
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow an authenticated user to view report pages that they should not have access to. IBM X-Force ID: 209697.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Cognos Analytics | Versions 11.1.7, 11.2.0, 11.2.1 |
| Netapp | Oncommand Insight | All versions |
References
- NVD record
- CVE.org record
- https://exchange.xforce.ibmcloud.com/vulnerabilities/209697
- https://security.netapp.com/advisory/ntap-20220602-0003/
- https://www.ibm.com/support/pages/node/6570957
- https://exchange.xforce.ibmcloud.com/vulnerabilities/209697
- https://security.netapp.com/advisory/ntap-20220602-0003/
- https://www.ibm.com/support/pages/node/6570957