CVE-2013-2988: Path Traversal
Absolute path traversal vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1, 10.1.1, 10.2, and 10.2.1 allows remote authenticated users to read files by leveraging the Report Author privilege, a different vulnerability than CVE-2013-2978.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-2988?
CVE-2013-2988 has a moderate severity level due to the potential for unauthorized file access by authenticated users.
How do I fix CVE-2013-2988?
To fix CVE-2013-2988, upgrade to IBM Cognos Business Intelligence version 10.2.2 or later, where this vulnerability has been addressed.
Who is affected by CVE-2013-2988?
CVE-2013-2988 affects users of IBM Cognos Business Intelligence versions 8.4.1, 10.1, 10.1.1, 10.2, and 10.2.1.
What types of attacks are possible with CVE-2013-2988?
CVE-2013-2988 allows remote authenticated users to exploit path traversal to access sensitive files on the server.
What should I do if I cannot upgrade to a fixed version for CVE-2013-2988?
If unable to upgrade, consider isolating the affected system from the network and limiting user permissions until a fix can be applied.