CVE-2021-29679: Code Injection

Reference Links

• https://exchange.xforce.ibmcloud.com/vulnerabilities/199915
• https://www.ibm.com/support/pages/node/6491661 (Advisory)
• https://security.netapp.com/advisory/ntap-20211112-0005/

Parent vulnerabilities

(Appears in the following advisories)

• IBM-6491661

Frequently Asked Questions

• What is the vulnerability ID for this security issue?

  The vulnerability ID for this security issue is CVE-2021-29679.

• What is the severity level of CVE-2021-29679?

  The severity level of CVE-2021-29679 is high with a CVSS score of 8.8.

• Which software versions are affected by CVE-2021-29679?

  IBM Cognos Analytics versions 11.1.7 and 11.2.0 are affected by CVE-2021-29679.

• How can an authenticated user exploit CVE-2021-29679?

  An authenticated user can exploit CVE-2021-29679 by executing code remotely through incorrectly neutralized user-controlled input that could be interpreted as a server-side include (SSI) directive.

• Where can I find more information about CVE-2021-29679?

  You can find more information about CVE-2021-29679 on the IBM X-Force ID page (https://exchange.xforce.ibmcloud.com/vulnerabilities/199915) and the IBM support page (https://www.ibm.com/support/pages/node/6491661).