Vulnerability Details CVE-2016-3037
IBM Cognos TM1 10.1 and 10.2 provides a service to return the victim's password with a valid session key. An authenticated attacker with user interaction could obtain this sensitive information. IBM X-Force ID: 114613.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 49.9%
CVSS Severity
CVSS v3 Score 5.7
CVSS v2 Score 3.5
References
Products affected by CVE-2016-3037
-
cpe:2.3:a:ibm:cognos_business_intelligence:10.1
-
cpe:2.3:a:ibm:cognos_business_intelligence:10.2
-
cpe:2.3:a:ibm:cognos_business_intelligence:10.2.2