| Package | Affected versions | Patched versions |
|---|---|---|
| cognos analytics | = 11.2.4= 12.0.3≥ 11.2.0, ≤ 11.2.3≥ 12.0.0, < 12.0.3 | 12.0.3 |
| cognos analytics reports | = 11.0.0.7 |
IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and IBM Cognos Analytics Reports for iOS 11.0.0.7 could allow a local attacker to obtain sensitive information in the form of an API key. An attacker could use this information to launch further attacks against affected applications.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free