CVE-2021-20455: IBM Cognos Controller information disclosure
IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
Other sources
IBM Cognos Controller could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-20455?
CVE-2021-20455 has been rated as a Medium severity vulnerability.
How do I fix CVE-2021-20455?
To fix CVE-2021-20455, upgrade IBM Cognos Controller to version 11.1.1 or later.
What are the potential impacts of CVE-2021-20455?
CVE-2021-20455 could allow remote attackers to obtain sensitive information from error messages.
Which versions are affected by CVE-2021-20455?
IBM Cognos Controller versions 11.0.0, 11.0.1, and IBM Controller version 11.1.0 are affected by CVE-2021-20455.
Is there a workaround for CVE-2021-20455?
There are no specific workarounds for CVE-2021-20455; upgrading to a patched version is recommended.