medium5.3
CVE-2022-43887
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could be vulnerable to sensitive information exposure by passing API keys to log files.
Impact
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could be vulnerable to sensitive information exposure by passing API keys to log files. If these keys contain sensitive information, it could lead to further attacks. IBM X-Force ID: 240450.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Cognos Analytics | from 11.1.0 before 11.1.7 from 11.2.0 through 11.2.3 Version 11.1.7 |