CVE-2019-4411: Medium severity ibm cognos controller vulnerability

Published Nov 9, 2019

Updated

IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, and 10.4.1 could allow an authenticated user to obtain sensitive information due to easy to guess session identifier names. IBM X-Force ID: 162658.

Other sources

IBM Cognos Controller could allow an authenticated user to obtain sensitive information due to easy to guess session identifier names.

— IBM

Affected Software

4 affected components

IBM Cognos Controller=10.3.0

IBM Cognos Controller=10.3.1

IBM Cognos Controller=10.4.0

IBM Cognos Controller=10.4.1

Remediation

Patch Available

https://www.ibm.com/support/pages/node/1086123

Event History

Nov 9, 2019

CVE Published

via MITRE·01:41 AM

Data Sourced

via MITRE·01:41 AM

DescriptionSeverityWeakness

Aug 4, 2024

Data Sourced

via IBM·07:43 PM

DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

IBM-1086123

Frequently Asked Questions

What is CVE-2019-4411?

CVE-2019-4411 is a vulnerability in IBM Cognos Controller that could allow an authenticated user to obtain sensitive information.

How does CVE-2019-4411 affect IBM Cognos Controller?

CVE-2019-4411 affects IBM Cognos Controller versions 10.3.0, 10.3.1, 10.4.0, and 10.4.1.

What is the severity of CVE-2019-4411?

The severity of CVE-2019-4411 is medium, with a CVSS score of 4.3.

How can an authenticated user exploit CVE-2019-4411?

An authenticated user can exploit CVE-2019-4411 by guessing session identifier names, allowing them to obtain sensitive information.

Is there a fix for CVE-2019-4411?

Yes, IBM has provided a fix for CVE-2019-4411. Please refer to the official IBM support page for more details.