CVE-2021-20470: High severity IBM Cognos Analytics vulnerability

Q: What is the vulnerability ID?

The vulnerability ID is CVE-2021-20470.

Q: What is the title of the vulnerability?

The title of the vulnerability is 'IBM Cognos Analytics does not require that users should have strong passwords by default which makes...'.

Q: What is the description of the vulnerability?

The description of the vulnerability is 'IBM Cognos Analytics does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.'

Q: What is the severity of CVE-2021-20470?

The severity of CVE-2021-20470 is medium.

Q: How can I fix the vulnerability?

To fix the vulnerability, enable the requirement for strong passwords in IBM Cognos Analytics.

Published Dec 3, 2021

Updated

IBM Cognos Analytics 11.1.7 and 11.2.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 196339.

Other sources

IBM Cognos Analytics does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.

Affected Software

7 affected components

IBM Cognos Analytics>=11.1.0<11.1.7

IBM Cognos Analytics=11.1.7

IBM Cognos Analytics=11.1.7-fixpack1

IBM Cognos Analytics=11.1.7-fixpack2

IBM Cognos Analytics=11.1.7-fixpack3

IBM Cognos Analytics=11.2.0

NetApp OnCommand Insight

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6520510

Event History

Dec 3, 2021

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionSeverityWeakness

Aug 3, 2024

Data Sourced

via IBM·05:47 PM

DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

IBM-6520510

Frequently Asked Questions

What is the vulnerability ID?

The vulnerability ID is CVE-2021-20470.

What is the title of the vulnerability?