CVE-2019-4176: Medium severity IBM Cognos Controller vulnerability

Published Jun 17, 2019

Updated

IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 could allow a remote attacker to bypass security restrictions, caused by an error related to insecure HTTP Methods. An attacker could exploit this vulnerability to gain access to the system. IBM X-Force ID: 158881.

Affected Software

5 affected components

IBM Cognos Controller=10.2.0

IBM Cognos Controller=10.2.1

IBM Cognos Controller=10.3.0

IBM Cognos Controller=10.3.1

IBM Cognos Controller=10.4.0

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=ibm10886913

Event History

Jun 17, 2019

CVE Published

via MITRE·03:10 PM

Data Sourced

via MITRE·03:10 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2019-4176?

The severity of CVE-2019-4176 is medium with a CVSS score of 5.3.

How does CVE-2019-4176 affect IBM Cognos Controller?

CVE-2019-4176 affects IBM Cognos Controller versions 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0.

What is the vulnerability description of CVE-2019-4176?

CVE-2019-4176 is a vulnerability in IBM Cognos Controller that allows a remote attacker to bypass security restrictions by exploiting insecure HTTP methods.

How can an attacker exploit CVE-2019-4176?

An attacker can exploit CVE-2019-4176 to gain access to the system.

Are there any references available for CVE-2019-4176?

Yes, you can find references for CVE-2019-4176 at the following links: [Link 1](http://www.ibm.com/support/docview.wss?uid=ibm10886913), [Link 2](https://exchange.xforce.ibmcloud.com/vulnerabilities/158881)