CVE-2022-34339

Published: Nov 3, 2022Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

"IBM Cognos Analytics 11.2.1, 11.2.0, 11.1.7 stores user credentials in plain clear text which can be read by an authenticated user. IBM X-Force ID: 229963."

Affected (8)

Products: Ibm: Cognos Analytics

Ibm

1 product

Cognos Analytics

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Ibm Cognos Analytics	From 11.1.0 to 11.1.7
Ibm Cognos Analytics	Version 11.1.7
Ibm Cognos Analytics	Version 11.1.7 fixpack1
Ibm Cognos Analytics	Version 11.1.7 fixpack2
Ibm Cognos Analytics	Version 11.1.7 fixpack3
Ibm Cognos Analytics	Version 11.1.7 fixpack4
Ibm Cognos Analytics	Version 11.2.0
Ibm Cognos Analytics	Version 11.2.1

Related CWEs

CWE-312

Cleartext Storage of Sensitive Information

The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

References (2)

https://www.ibm.com/support/pages/node/6828527

Source: psirt@us.ibm.com

PatchVendor Advisory

https://www.ibm.com/support/pages/node/6828527

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.