CVE-2013-2978

Absolute path traversal vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1, 10.1.1, 10.2, and 10.2.1 allows remote authenticated users to read files by leveraging the Report Author privilege, a different vulnerability than CVE-2013-2988.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:cognos_business_intelligence:8.4.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:cognos_business_intelligence:10.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:cognos_business_intelligence:10.1.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:cognos_business_intelligence:10.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:cognos_business_intelligence:10.2.1:*:*:*:*:*:*:*

History

No history.

Information

Published : 2013-08-27 03:34

Updated : 2023-12-10 11:16


NVD link : CVE-2013-2978

Mitre link : CVE-2013-2978

CVE.ORG link : CVE-2013-2978


JSON object : View

Products Affected

ibm

  • cognos_business_intelligence
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')