| |
Vulnerability CVE-2013-5445
Published: 2014-03-25 Modified: 2014-03-26
| Description: |
IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows local users to obtain sensitive cleartext information by leveraging knowledge of a static decryption key. |
Type:
CWE-310 (Cryptographic Issues)
CVSS2 => (AV:N/AC:L/Au:N/C:P/I:N/A:N)
| CVSS Base Score |
Impact Subscore |
Exploitability Subscore |
5/10 |
2.9/10 |
10/10 |
| Exploit range |
Attack complexity |
Authentication |
Remote |
Low |
No required |
| Confidentiality impact |
Integrity impact |
Availability impact |
Partial |
None |
None |
References: |
http://xforce.iss.net/xforce/xfdb/87821
http://www-01.ibm.com/support/docview.wss?uid=swg21667626
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
