CVEvulnerability

CVE-2022-34357

6.5 MEDIUM Published 2024-02-26 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-02-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-770

Description

IBM Cognos Analytics Mobile Server 11.1.7, 11.2.4, and 12.0.0 is vulnerable to Denial of Service due to due to weak or absence of rate limiting. By making unlimited http requests, it is possible for a single user to exhaust server resources over a period of time making service unavailable for other legitimate users. IBM X-Force ID: 230510.

Affected configurations

• netapp oncommand insight • ibm cognos analytics (>= 11.1.1 < 11.1.7) • ibm cognos analytics (>= 11.2.0 < 11.2.4) • ibm cognos analytics 11.1.7 • ibm cognos analytics 11.2.4 • ibm cognos analytics 12.0.0 • ibm cognos analytics 12.0.1

Related

Weakness · CWE (1)

  • CWE-770 Allocation of Resources Without Limits or Throttling weakness

References