CVE-2014-0863

Published: Sep 5, 2014Modified: May 6, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

The client in IBM Cognos TM1 9.5.2.3 before IF5, 10.1.1.2 before IF1, 10.2.0.2 before IF1, and 10.2.2.0 before IF1 stores obfuscated passwords in memory, which allows remote authenticated users to obtain sensitive cleartext information via an unspecified security tool.

Affected (4)

Products: Ibm: Cognos Tm1

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Cognos Tm1	Version 10.1.1.2
Ibm Cognos Tm1	Version 10.2.0.2
Ibm Cognos Tm1	Version 10.2.2
Ibm Cognos Tm1	Version 9.5.2.3

Related CWEs

References (8)

http://www-01.ibm.com/support/docview.wss?uid=swg21682397

Source: psirt@us.ibm.com

PatchVendor Advisory

http://www.securityfocus.com/bid/69594

Source: psirt@us.ibm.com

http://www.securitytracker.com/id/1030805

Source: psirt@us.ibm.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/90937

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg21682397

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/69594

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1030805

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/90937

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.