IBM Cognos Analytics Mobile Server 11.1.7, 11.2.4, and 12.0.0 is vulnerable to Denial of Service due to due to weak or absence of rate limiting. By making unlimited http requests, it is possible for a single user to exhaust server resources over a period of time making service unavailable for other legitimate users. IBM X-Force ID: 230510.
References
| Link | Resource |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/230510 | VDB Entry Vendor Advisory |
| https://security.netapp.com/advisory/ntap-20240405-0001/ | Third Party Advisory |
| https://security.netapp.com/advisory/ntap-20240621-0006/ | Third Party Advisory |
| https://www.ibm.com/support/pages/node/7123154 | Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/230510 | VDB Entry Vendor Advisory |
| https://security.netapp.com/advisory/ntap-20240405-0001/ | Third Party Advisory |
| https://security.netapp.com/advisory/ntap-20240621-0006/ | Third Party Advisory |
| https://www.ibm.com/support/pages/node/7123154 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
17 Dec 2024, 16:49
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Ibm
Ibm cognos Analytics Netapp Netapp oncommand Insight |
|
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/230510 - VDB Entry, Vendor Advisory | |
| References | () https://security.netapp.com/advisory/ntap-20240405-0001/ - Third Party Advisory | |
| References | () https://security.netapp.com/advisory/ntap-20240621-0006/ - Third Party Advisory | |
| References | () https://www.ibm.com/support/pages/node/7123154 - Vendor Advisory | |
| CPE | cpe:2.3:a:ibm:cognos_analytics:11.2.4:fixpack1:*:*:*:*:*:* cpe:2.3:a:ibm:cognos_analytics:12.0.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:cognos_analytics:11.2.4:fixpack2:*:*:*:*:*:* cpe:2.3:a:ibm:cognos_analytics:11.2.4:-:*:*:*:*:*:* cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:* cpe:2.3:a:ibm:cognos_analytics:*:*:*:*:*:*:*:* cpe:2.3:a:ibm:cognos_analytics:11.1.7:fixpack2:*:*:*:*:*:* cpe:2.3:a:ibm:cognos_analytics:11.1.7:-:*:*:*:*:*:* cpe:2.3:a:ibm:cognos_analytics:11.1.7:fixpack4:*:*:*:*:*:* cpe:2.3:a:ibm:cognos_analytics:11.1.7:fixpack5:*:*:*:*:*:* cpe:2.3:a:ibm:cognos_analytics:12.0.1:*:*:*:*:*:*:* cpe:2.3:a:ibm:cognos_analytics:11.1.7:fixpack7:*:*:*:*:*:* cpe:2.3:a:ibm:cognos_analytics:11.1.7:fixpack3:*:*:*:*:*:* cpe:2.3:a:ibm:cognos_analytics:11.1.7:fixpack6:*:*:*:*:*:* cpe:2.3:a:ibm:cognos_analytics:11.1.7:fixpack1:*:*:*:*:*:* |
Information
Published : 2024-02-26 16:27
Updated : 2024-12-17 16:49
NVD link : CVE-2022-34357
Mitre link : CVE-2022-34357
CVE.ORG link : CVE-2022-34357
JSON object : View
Products Affected
ibm
- cognos_analytics
netapp
- oncommand_insight
CWE
CWE-770
Allocation of Resources Without Limits or Throttling