IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 could allow a remote attacker to obtain sensitive information, caused by a flaw in the HTTP OPTIONS method, aka Optionsbleed. By sending an OPTIONS HTTP request, a remote attacker could exploit this vulnerability to read secret data from process memory and obtain sensitive information. IBM X-Force ID: 158878.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published: 2019-06-17T15:10:22.837762Z

Updated: 2024-09-17T00:37:17.811Z

Reserved: 2019-01-03T00:00:00

Link: CVE-2019-4173

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2019-06-17T15:15:12.520

Modified: 2024-11-21T04:43:16.767

Link: CVE-2019-4173

cve-icon Redhat

No data.