CVE-2017-1125

IBM Cognos Analytics 10.1 and 10.2 could allow a local user to craft a URL which could confirm the existence of and expose postial contents of a file. IBM X-Force ID: 121340.

Score

CVSS 3.0 3.3 Low

Status

Modified - psirt@us.ibm.com

Published

2017-06-07

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• Cognos Business Intelligence (Ibm)
• Cognos Business Intelligence Server (Ibm)

References

• http://www.ibm.com/support/docview.wss?uid=swg22004036
• http://www.securityfocus.com/bid/98945
• https://exchange.xforce.ibmcloud.com/vulnerabilities/121340