CVEvulnerability

CVE-2022-43887

5.3 MEDIUM Published 2022-12-19 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-12-19
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-532

Description

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could be vulnerable to sensitive information exposure by passing API keys to log files. If these keys contain sensitive information, it could lead to further attacks. IBM X-Force ID: 240450.

Affected configurations

• ibm cognos analytics (>= 11.1.0 < 11.1.7) • ibm cognos analytics (>= 11.2.0 <= 11.2.3) • ibm cognos analytics 11.1.7

Related

Weakness · CWE (1)

  • CWE-532 Insertion of Sensitive Information into Log File weakness

References