CVE-2023-35009
MediumCVSS 5.3Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
IBM Cognos Analytics versions 11.1.7, 11.2.0, and 11.2.1 could allow a remote attacker to obtain system information without authentication, which could be used in reconnaissance for future attacks.
Risk Assessment
The organization may be at risk as attackers could gather valuable system information, facilitating further attack planning.
Recommendation
It is recommended to update to the latest version of IBM Cognos Analytics and implement additional security measures to restrict access to system information.
Original NVD description (English source)
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a remote attacker to obtain system information without authentication which could be used in reconnaissance to gather information that could be used for future attacks. IBM X-Force ID: 257703.