VULNERABILITY INTELLIGENCE

CVE-2022-43887

CVSS score5.3 MEDIUM
EPSS probability0.56%
CISA KEVNot currently listed
Published2022-12-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could be vulnerable to sensitive information exposure by passing API keys to log files. If these keys contain sensitive information, it could lead to further attacks. IBM X-Force ID: 240450.

Weakness classification

  • psirt@us.ibm.com: CWE-532
  • nvd@nist.gov: CWE-532

Primary references