CVE-2019-4723: High severity ibm cognos analytics vulnerability
IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain credentials from a user's browser via incorrect autocomplete settings in New Data Server Connection page. IBM X-Force ID: 172129.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2019-4723?
The severity of CVE-2019-4723 is high with a severity value of 7.5.
How can a remote attacker exploit CVE-2019-4723?
A remote attacker can exploit CVE-2019-4723 by obtaining credentials from a user's browser via incorrect autocomplete settings in the New Data Server Connection page of IBM Cognos Analytics 11.0 and 11.1.
Which versions of IBM Cognos Analytics are affected by CVE-2019-4723?
IBM Cognos Analytics 11.0 and 11.1 are affected by CVE-2019-4723.
Is NetApp OnCommand Insight affected by CVE-2019-4723?
Yes, NetApp OnCommand Insight is also affected by CVE-2019-4723.
How can I mitigate the vulnerability in IBM Cognos Analytics?
To mitigate the vulnerability in IBM Cognos Analytics, ensure that the autocomplete settings in the New Data Server Connection page are configured correctly.