CVE-2022-38707: IBM Cognos Command Center information disclosure
IBM Cognos Command Center 10.2.4.1 could allow a local attacker to obtain sensitive information due to insufficient session expiration. IBM X-Force ID: 234179.
Other sources
IBM Cognos Command Center could allow a local attacker to obtain sensitive information due to insufficient session expiration.
IBM Cognos Command Center information disclosure
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2022-38707?
The severity of CVE-2022-38707 is medium with a severity value of 5.5.
How does IBM Cognos Command Center 10.2.4.1 allow information disclosure?
IBM Cognos Command Center 10.2.4.1 allows information disclosure due to insufficient session expiration.
What is the IBM X-Force ID associated with CVE-2022-38707?
The IBM X-Force ID associated with CVE-2022-38707 is 234179.
How can I fix the vulnerability in IBM Cognos Command Center 10.2.4.1?
To fix the vulnerability in IBM Cognos Command Center 10.2.4.1, it is recommended to apply the necessary patches or updates provided by IBM.
What is the Common Weakness Enumeration (CWE) ID for CVE-2022-38707?
The Common Weakness Enumeration (CWE) ID for CVE-2022-38707 is 613.