CVE Vulnerabilities

CVE-2018-1842

Improper Verification of Cryptographic Signature

Published: Nov 09, 2018 | Modified: Oct 09, 2019
CVSS 3.x
3.6
LOW
Source:
NVD
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS 2.x
3.3 LOW
AV:L/AC:M/Au:N/C:P/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

IBM Cognos Analytics 11 Configuration tool, under certain circumstances, will bypass OIDC namespace signature verification on its id_token. IBM X-Force ID: 150902.

Weakness

The product does not verify, or incorrectly verifies, the cryptographic signature for data.

Affected Software

Name Vendor Start Version End Version
Cognos_analytics Ibm 11.0.0.0 (including) 11.0.12.0 (including)

References