CVE-2019-4334: Medium severity IBM Cognos Analytics vulnerability

Published Nov 9, 2019

Updated

IBM Cognos Analytics 11.0 and 11.1 could reveal sensitive information to an authenticated user that could be used in future attacks against the system. IBM X-Force ID: 161271.

Other sources

IBM Cognos Analytics could reveal sensitive information to an authenticated user that could be used in future attacks against the system.

— IBM

Affected Software

2 affected components

IBM Cognos Analytics=11.0.0

IBM Cognos Analytics=11.1.0

Remediation

Patch Available

https://www.ibm.com/support/pages/node/1074144

Event History

Nov 9, 2019

CVE Published

via MITRE·01:41 AM

Data Sourced

via MITRE·01:41 AM

DescriptionSeverityWeakness

Aug 4, 2024

Data Sourced

via IBM·07:42 PM

DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

IBM-1074144

Frequently Asked Questions

What is the severity of CVE-2019-4334?

CVE-2019-4334 is classified as a moderate severity vulnerability.

How do I fix CVE-2019-4334?

To fix CVE-2019-4334, it is recommended to upgrade to the latest version of IBM Cognos Analytics.

Who is affected by CVE-2019-4334?

Users of IBM Cognos Analytics versions 11.0.0 and 11.1.0 are affected by CVE-2019-4334.

What type of information could be exposed due to CVE-2019-4334?

CVE-2019-4334 could potentially expose sensitive information that may be exploited in future attacks.

Is CVE-2019-4334 a remote vulnerability?

CVE-2019-4334 requires authentication, implying that it is not a remote vulnerability.