Not rated
CVE-2016-3037 IBM Cognos TM1 10.1 and 10.2 provides a service to return the victim's password with a valid session key
Description
IBM Cognos TM1 10.1 and 10.2 provides a service to return the victim's password with a valid session key. An authenticated attacker with user interaction could obtain this sensitive information. IBM X-Force ID: 114613.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cognos TM1 10.2 | 10.2 → 10.2.2 | No fix stated |
| Cognos TM1 10.1 | 10.1 → 10.1.1.2 | No fix stated |