ByteOS Network

NVD Vulnerability Details :

CVE-2017-1764

Analyzed

Source-psirt@us.ibm.com

Published At-23 Apr, 2018 | 13:29

Updated At-03 Oct, 2019 | 00:03

IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1, and 10.2.2, under specialized circumstances, could expose plain text credentials to a local user. IBM X-Force ID: 136149.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	7.0	HIGH	CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	1.9	LOW	AV:L/AC:M/Au:N/C:P/I:N/A:N

CPE Matches

IBM Corporation

>>cognos_business_intelligence>>10.2

cpe:2.3:a:ibm:cognos_business_intelligence:10.2:*:*:*:*:*:*:*

IBM Corporation

>>cognos_business_intelligence>>10.2.1

cpe:2.3:a:ibm:cognos_business_intelligence:10.2.1:*:*:*:*:*:*:*

IBM Corporation

>>cognos_business_intelligence>>10.2.1.1

cpe:2.3:a:ibm:cognos_business_intelligence:10.2.1.1:*:*:*:*:*:*:*

IBM Corporation

>>cognos_business_intelligence>>10.2.2

cpe:2.3:a:ibm:cognos_business_intelligence:10.2.2:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-522	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.ibm.com/support/docview.wss?uid=swg22014202	psirt@us.ibm.com	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/136149	psirt@us.ibm.com	VDB Entry Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History