IBM Cognos Analytics 11.2.1, 11.2.0, 11.1.7 stores user credentials in plain clear text which can be read by an authenticated user. IBM X-Force ID: 229963.
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cognos_analytics | Ibm | 11.1.0 (including) | 11.1.7 (excluding) |
| Cognos_analytics | Ibm | 11.1.7 (including) | 11.1.7 (including) |
| Cognos_analytics | Ibm | 11.1.7-fixpack1 (including) | 11.1.7-fixpack1 (including) |
| Cognos_analytics | Ibm | 11.1.7-fixpack2 (including) | 11.1.7-fixpack2 (including) |
| Cognos_analytics | Ibm | 11.1.7-fixpack3 (including) | 11.1.7-fixpack3 (including) |
| Cognos_analytics | Ibm | 11.1.7-fixpack4 (including) | 11.1.7-fixpack4 (including) |
| Cognos_analytics | Ibm | 11.2.0 (including) | 11.2.0 (including) |
| Cognos_analytics | Ibm | 11.2.1 (including) | 11.2.1 (including) |