CVE-2021-29768
First published: Wed Jun 22 2022(Updated: )
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a low level user to obtain sensitive information from the details of the 'Cloud Storage' page for which they should not have access. IBM X-Force ID: 202682.
Credit: psirt@us.ibm.com psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Cognos Analytics | >=11.1.0<11.1.7 | |
| IBM Cognos Analytics | =11.1.7 | |
| IBM Cognos Analytics | =11.1.7-fixpack1 | |
| IBM Cognos Analytics | =11.1.7-fixpack2 | |
| IBM Cognos Analytics | =11.1.7-fixpack3 | |
| IBM Cognos Analytics | =11.1.7-fixpack4 | |
| IBM Cognos Analytics | =11.2.0 | |
| IBM Cognos Analytics | =11.2.1 | |
| NetApp OnCommand Insight |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-29768?
CVE-2021-29768 refers to a vulnerability in IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 that could allow a low level user to obtain sensitive information from the details of the 'Cloud Storage' page for which they should not have access.
Which versions of IBM Cognos Analytics are affected by CVE-2021-29768?
IBM Cognos Analytics versions 11.1.7, 11.2.0, and 11.2.1 are affected by CVE-2021-29768.
What is the severity of CVE-2021-29768?
CVE-2021-29768 has a severity rating of 6.5, which is considered medium.
How can a low level user exploit CVE-2021-29768?
A low level user can exploit CVE-2021-29768 by accessing and obtaining sensitive information from the 'Cloud Storage' page in IBM Cognos Analytics 11.1.7, 11.2.0, or 11.2.1.
Are there any available fixes for CVE-2021-29768?
IBM has not provided specific fixes for CVE-2021-29768, but users are advised to follow the recommendations and security measures outlined in the IBM advisory.
- agent/author
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/type
- collector/nvd-api
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/severity
- agent/remedy
- agent/references
- agent/tags
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/ibm
- canonical/ibm cognos analytics
- version/ibm cognos analytics/11.1.0
- version/ibm cognos analytics/11.1.7
- version/ibm cognos analytics/11.1.7-fixpack1
- version/ibm cognos analytics/11.1.7-fixpack2
- version/ibm cognos analytics/11.1.7-fixpack3
- version/ibm cognos analytics/11.1.7-fixpack4
- version/ibm cognos analytics/11.2.0
- version/ibm cognos analytics/11.2.1
- vendor/netapp
- canonical/netapp oncommand insight