CVE-2020-4877
First published: Thu Jan 20 2022(Updated: )
IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 could be vulnerable to unauthorized modifications by using public fields in public classes. IBM X-Force ID: 190843.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Cognos Controller | =10.4.0 | |
| IBM Cognos Controller | =10.4.1 | |
| IBM Cognos Controller | =10.4.2 | |
| Microsoft Windows | ||
| <=IBM Cognos Controller 10.4.2 | ||
| <=IBM Cognos Controller 10.4.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this security vulnerability in IBM Cognos Controller?
The vulnerability ID is CVE-2020-4877.
What is the severity of CVE-2020-4877?
The severity of CVE-2020-4877 is critical.
What is the official reference for CVE-2020-4877?
The official reference for CVE-2020-4877 is [this IBM X-Force page](https://exchange.xforce.ibmcloud.com/vulnerabilities/190843) and [this IBM support page](https://www.ibm.com/support/pages/node/6509856).
How can unauthorized modifications be made in IBM Cognos Controller?
Unauthorized modifications can be made in IBM Cognos Controller by using public fields in public classes.
Which versions of IBM Cognos Controller are affected by CVE-2020-4877?
IBM Cognos Controller versions 10.4.0, 10.4.1, and 10.4.2 are affected by CVE-2020-4877.
- collector/nvd-index
- agent/references
- agent/type
- agent/first-publish-date
- agent/severity
- agent/author
- agent/weakness
- agent/description
- agent/softwarecombine
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- agent/tags
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/trending
- vendor/ibm
- canonical/ibm cognos controller
- version/ibm cognos controller/10.4.0
- version/ibm cognos controller/10.4.1
- version/ibm cognos controller/10.4.2
- vendor/microsoft
- canonical/microsoft windows
- canonical/ibm cognos controller 10.4.2
- version/ibm cognos controller 10.4.2/ibm cognos controller 10.4.2
- canonical/ibm cognos controller 10.4.1
- version/ibm cognos controller 10.4.1/ibm cognos controller 10.4.1
- canonical/ibm cognos controller 10.4.0
- version/ibm cognos controller 10.4.0/ibm cognos controller 10.4.0