IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows local users to obtain sensitive cleartext information by leveraging knowledge of a static decryption key.
References
Link | Resource |
---|---|
http://www-01.ibm.com/support/docview.wss?uid=swg21667626 | Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/87821 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2014-03-25 13:55
Updated : 2017-08-28 18:33
NVD link : CVE-2013-5445
Mitre link : CVE-2013-5445
JSON object : View
CWE
CWE-310
Cryptographic Issues
Products Affected
ibm
- cognos_express