Products
IBM Cognos Command Center
- 10.2.4.1
- 10.2.5
Source
psirt@us.ibm.com
Tags
CVE-2024-31899 details
Published : Sept. 26, 2024, 2:15 p.m.
Last Modified : Sept. 26, 2024, 2:15 p.m.
Last Modified : Sept. 26, 2024, 2:15 p.m.
Description
IBM Cognos Command Center 10.2.4.1 and 10.2.5 could disclose highly sensitive user information to an authenticated user with physical access to the device.
CVSS Score
| 1 | 2 | 3 | 4.3 | 5 | 6 | 7 | 8 | 9 | 10 |
|---|
Weakness
| Weakness | Name | Description |
|---|---|---|
| CWE-256 | Plaintext Storage of a Password | Storing a password in plaintext may result in a system compromise. |
CVSS Data
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
LOW
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
Base Score
4.3
Exploitability Score
0.7
Impact Score
3.6
Base Severity
MEDIUM
Vector String : CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
References
| URL | Source |
|---|---|
| https://www.ibm.com/support/pages/node/7149734 | psirt@us.ibm.com |
This website uses the NVD API, but is not approved or certified by it.