CVE-2020-4874: IBM Cognos Controller information disclosure
IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 190837.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-4874?
CVE-2020-4874 is considered to have a high severity due to the potential exposure of sensitive information through weak cryptographic algorithms.
How do I fix CVE-2020-4874?
To remediate CVE-2020-4874, upgrade IBM Cognos Controller to a version that implements stronger cryptographic algorithms.
What versions of IBM Cognos Controller are affected by CVE-2020-4874?
CVE-2020-4874 affects IBM Cognos Controller versions 10.4.1, 10.4.2, and 11.0.0.
What can an attacker do with the vulnerability CVE-2020-4874?
An attacker exploiting CVE-2020-4874 can potentially decrypt highly sensitive information due to the use of weak cryptographic algorithms.
Is CVE-2020-4874 related to any specific IBM products?
CVE-2020-4874 specifically affects the IBM Cognos Controller software, impacting its security posture.