IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1, and 10.2.2, under specialized circumstances, could expose plain text credentials to a local user. IBM X-Force ID: 136149.
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cognos_business_intelligence | Ibm | 10.2 (including) | 10.2 (including) |
| Cognos_business_intelligence | Ibm | 10.2.1 (including) | 10.2.1 (including) |
| Cognos_business_intelligence | Ibm | 10.2.1.1 (including) | 10.2.1.1 (including) |
| Cognos_business_intelligence | Ibm | 10.2.2 (including) | 10.2.2 (including) |