IBM Cognos Command Center 10.2.4.1 and 10.2.5 could disclose highly sensitive user information to an authenticated user with physical access to the device.
Weakness
The product stores a password in plaintext within resources such as memory or files.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cognos_command_center | Ibm | 10.2.4.1 (including) | 10.2.4.1 (including) |
| Cognos_command_center | Ibm | 10.2.5 (including) | 10.2.5 (including) |