IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 159356.
References
Link | Resource |
---|---|
https://exchange.xforce.ibmcloud.com/vulnerabilities/159356 | VDB Entry Vendor Advisory |
https://security.netapp.com/advisory/ntap-20200103-0003/ | Third Party Advisory |
https://www.ibm.com/support/pages/node/1138588 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
14 Dec 2022, 18:03
Type | Values Removed | Values Added |
---|---|---|
First Time |
Netapp
Netapp oncommand Insight |
|
References | (CONFIRM) https://security.netapp.com/advisory/ntap-20200103-0003/ - Third Party Advisory | |
CPE | cpe:2.3:a:ibm:cognos_analytics:11.0.13:fix_pack_2:*:*:*:*:*:* |
cpe:2.3:a:ibm:cognos_analytics:11.0.13:fixpack1:*:*:*:*:*:* cpe:2.3:a:ibm:cognos_analytics:11.0.13:fixpack2:*:*:*:*:*:* cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:* |
Information
Published : 2019-12-20 17:15
Updated : 2023-12-10 13:13
NVD link : CVE-2019-4231
Mitre link : CVE-2019-4231
CVE.ORG link : CVE-2019-4231
JSON object : View
Products Affected
ibm
- cognos_analytics
netapp
- oncommand_insight
CWE
CWE-352
Cross-Site Request Forgery (CSRF)