CVE-2021-20455

IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.

Score
CVSS 3.1 3.7 Low
Status
Analyzed - psirt@us.ibm.com
Published
2025-01-07
Last modified
2025-01-07
Weaknesses
CWE-209

Affected products

References