Back to overview

CVE-2020-4561

CRITICAL
10.0
CVSS 3.0
Description
IBM Cognos Analytics 11.0 and 11.1 DQM API allows submitting of all control requests in unauthenticated sessions. This allows a remote attacker who can access a valid CA endpoint to read and write files to the Cognos Analytics system. IBM X-Force ID: 183903.

Metadata

CVE ID
CVE-2020-4561
State
PUBLISHED
Assigner
ibm
Reserved
2019-12-30 00:00 UTC
Published
2021-05-31 15:10 UTC
Last updated
2024-09-17 03:39 UTC
Vendor / Product
IBM / Cognos Analytics
Sources
cve.org  ·  NVD

Severity & Metrics

10.0 CRITICAL CVSS 3.0
CVSS:3.0/PR:N/C:H/I:H/S:C/AC:L/A:H/UI:N/AV:N/RL:O/E:U/RC:C
Affected products (1)
VendorProductPlatformVersions
IBM Cognos Analytics — 11.0, 11.1
Weakness (CWE)
CWESourceDescription
— cna Gain Access
CVSS scores (1)
ScoreSeverityVersionSourceVector
10.0 CRITICAL 3.0 cna CVSS:3.0/PR:N/C:H/I:H/S:C/AC:L/A:H/UI:N/AV:N/RL:O/E:U/RC:C
References (3)
Back to overview