CVE-2020-4877 - IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 could be vulnerable to unauthorized modifications by using public fields in public classes

Back Back to CVE browser

CRITICAL

IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 could be vulnerable to unauthorized modifications by using public fields in public classes

Published Jan 21, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 0.90%

Description

IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 could be vulnerable to unauthorized modifications by using public fields in public classes. IBM X-Force ID: 190843.

Affected products

Vendor IBM Product Cognos Controller Default
n/a
- Version
  10.4.0
  Status
  affected
  Constraints
  -
- Version
  10.4.1
  Status
  affected
  Constraints
  -
- Version
  10.4.2
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

Cognos Controller

n/a

Version	Status	Constraints
10.4.0	affected	-
10.4.1	affected	-
10.4.2	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-863

Incorrect Authorization

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-26124
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/190843
vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6509856
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-26124		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/190843		vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6509856		x_refsource_CONFIRMVendor Advisory