Clear Text Credential Storage in IBM Cognos Analytics

CVE-2021-39009

What is CVE-2021-39009?

In IBM Cognos Analytics versions 11.1.7, 11.2.0, and 11.2.1, user credentials are stored in plain clear text, which can be readily accessed by a local privileged user. This makes sensitive user data vulnerable to unauthorized access and potential exploitation. It is critical for organizations using these versions to implement necessary security measures, such as restricting local privileged access and applying patches to mitigate the risk associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References