Non notée
CVE-2016-3037 IBM Cognos TM1 10.1 and 10.2 provides a service to return the victim's password with a valid session key
Description
IBM Cognos TM1 10.1 and 10.2 provides a service to return the victim's password with a valid session key. An authenticated attacker with user interaction could obtain this sensitive information. IBM X-Force ID: 114613.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cognos TM1 10.2 | 10.2 → 10.2.2 | Pas de correctif indiqué |
| Cognos TM1 10.1 | 10.1 → 10.1.1.2 | Pas de correctif indiqué |