CVE-2019-4183: High severity ibm cognos analytics vulnerability

Published Sep 17, 2019

Updated

IBM Cognos Analytics 11.0, and 11.1 is vulnerable to a denial of service attack that could allow a remote user to send specially crafted requests that would consume all available CPU and memory resources. IBM X-Force ID: 158973.

Other sources

IBM Cognos Analytics is vulnerable to a denial of service attack that could allow a remote user to send specially crafted requests that would consume all available CPU and memory resources.

— IBM

Affected Software

3 affected components

IBM Cognos Analytics=11.0.0

IBM Cognos Analytics=11.1.0

NetApp OnCommand Insight

Remediation

Patch Available

https://www.ibm.com/support/pages/node/1073530

Event History

Sep 17, 2019

CVE Published

via MITRE·07:05 PM

Data Sourced

via MITRE·07:05 PM

DescriptionSeverityWeakness

Aug 4, 2024

Data Sourced

via IBM·07:40 PM

DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

IBM-1073530

Frequently Asked Questions

What is the severity of CVE-2019-4183?

CVE-2019-4183 is classified as a high severity vulnerability due to its potential for causing denial of service.

How do I fix CVE-2019-4183?

To fix CVE-2019-4183, users should upgrade to the latest supported versions of IBM Cognos Analytics as recommended by IBM.

Who is affected by CVE-2019-4183?

CVE-2019-4183 affects users of IBM Cognos Analytics versions 11.0.0 and 11.1.0.

What type of attack does CVE-2019-4183 allow?

CVE-2019-4183 allows a remote user to execute a denial of service attack that can consume system resources.

Can CVE-2019-4183 be exploited remotely?

Yes, CVE-2019-4183 can be exploited remotely by sending specially crafted requests to the server.