CVE-2019-4589
CVE-2019-4589
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 4.6EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
03 Aug 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
IBM Cognos Analytics 11.0 and 11.1 is vulnerable to privlege escalation where the "My schedules and subscriptions" page is visible and accessible to a less privileged user. IBM X-Force ID: 167449.
CVSS:3.0/PR:L/AV:N/I:L/S:U/A:N/UI:R/C:L/AC:L/RC:C/RL:O/E:U
Affected products
IBM · Cognos Analytics