Lucene search
IbmCVE-2013-2988HistoryAug 27, 2013 - 3:34 a.m.
CVE-2013-2988
2013-08-2703:34:35
CWE-22
ibm
web.nvd.nist.gov
22
ibm
cognos
business intelligence
bi
path traversal
vulnerability
cve-2013-2988
nvd
CVSS2
2.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:N/A:N
AI Score
6
Confidence
Low
EPSS
0.002
Percentile
61.3%
Absolute path traversal vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1, 10.1.1, 10.2, and 10.2.1 allows remote authenticated users to read files by leveraging the Report Author privilege, a different vulnerability than CVE-2013-2978.
Affected configurations
Node
ibmcognos_business_intelligenceMatch8.4.1
ORibmcognos_business_intelligenceMatch10.1
ORibmcognos_business_intelligenceMatch10.1.1
ORibmcognos_business_intelligenceMatch10.2
ORibmcognos_business_intelligenceMatch10.2.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | cognos_business_intelligence | 8.4.1 | cpe:2.3:a:ibm:cognos_business_intelligence:8.4.1:*:*:*:*:*:*:* |
| ibm | cognos_business_intelligence | 10.1 | cpe:2.3:a:ibm:cognos_business_intelligence:10.1:*:*:*:*:*:*:* |
| ibm | cognos_business_intelligence | 10.1.1 | cpe:2.3:a:ibm:cognos_business_intelligence:10.1.1:*:*:*:*:*:*:* |
| ibm | cognos_business_intelligence | 10.2 | cpe:2.3:a:ibm:cognos_business_intelligence:10.2:*:*:*:*:*:*:* |
| ibm | cognos_business_intelligence | 10.2.1 | cpe:2.3:a:ibm:cognos_business_intelligence:10.2.1:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2013-2978
2013-08-27 01:00:00
CVE-2013-2988
2013-08-27 01:00:00
cve
cve
CVE-2013-2978
2013-08-27 03:34:35
nvd
nvd
CVE-2013-2988
2013-08-27 03:34:35
CVE-2013-2978
2013-08-27 03:34:35
prion
prion
Path traversal
2013-08-27 03:34:00
Path traversal
2013-08-27 03:34:00
ibm
ibm
CVSS2
2.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:N/A:N
AI Score
6
Confidence
Low
EPSS
0.002
Percentile
61.3%
Related for CVE-2013-2988