CVE-2021-20556: IBM Cognos Controller information disclosure
Published May 3, 2024
·Updated
IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 could allow a remote user to enumerate usernames due to differentiating error messages on existing usernames. IBM X-Force ID: 199181.
Affected Software
3 affected components
IBM Cognos Controller=10.4.1
IBM Cognos Controller=10.4.2
IBM Cognos Controller=11.0.0
Event History
May 3, 2024
CVE Published
via MITRE·05:31 PM
Data Sourced
via MITRE·05:31 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-20556?
CVE-2021-20556 has a medium severity rating due to the potential for user enumeration.
2
How do I fix CVE-2021-20556?
To fix CVE-2021-20556, update IBM Cognos Controller to the latest version that addresses this vulnerability.
3
What versions of IBM Cognos Controller are affected by CVE-2021-20556?
CVE-2021-20556 affects IBM Cognos Controller versions 10.4.1, 10.4.2, and 11.0.0.
4
What could an attacker achieve by exploiting CVE-2021-20556?
An attacker may exploit CVE-2021-20556 to enumerate valid usernames, leading to potential further attacks.
5
Is CVE-2021-20556 a local or remote vulnerability?
CVE-2021-20556 is classified as a remote vulnerability.