Vulnerability Details CVE-2019-4175
IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, and 10.4.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 158880.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 30.6%
CVSS Severity
CVSS v3 Score 5.9
CVSS v2 Score 5.0
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/158880
- https://www.ibm.com/support/pages/security-bulletin-security-vulnerabilties-exist-ibm-cognos-controller
- https://exchange.xforce.ibmcloud.com/vulnerabilities/158880
- https://www.ibm.com/support/pages/security-bulletin-security-vulnerabilties-exist-ibm-cognos-controller
Products affected by CVE-2019-4175
-
cpe:2.3:a:ibm:cognos_controller:10.4.0
-
cpe:2.3:a:ibm:cognos_controller:10.4.1