CVE-2019-4729: Medium severity IBM Cognos Analytics vulnerability
IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 172519.
Other sources
IBM Cognos Analytixs could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2019-4729?
CVE-2019-4729 is a vulnerability in IBM Cognos Analytics 11.0 and 11.1 that could allow a remote attacker to obtain sensitive information.
How does CVE-2019-4729 work?
CVE-2019-4729 works by exploiting the behavior of IBM Cognos Analytics to return a detailed technical error message in the browser, which could contain sensitive information.
How severe is CVE-2019-4729?
CVE-2019-4729 has a severity rating of 4.3, which is considered medium.
Which software versions are affected by CVE-2019-4729?
CVE-2019-4729 affects IBM Cognos Analytics versions 11.0.0.0 to 11.0.13 and versions 11.1.0 to 11.1.6.
How can I fix CVE-2019-4729?
To fix CVE-2019-4729, it is recommended to apply the necessary patches and updates provided by IBM.