description: IBM Cognos TM1 10.1 and 10.2 provides a service to return the victim's password with a valid session key. An authenticated attacker with user interaction could obtain this sensitive information. IBM X-Force ID: 114613.
problem types: Obtain Information
affected:
{
product: Cognos TM1
vendor: IBM Corporation
versions:
status: affected, version: 10.1
status: affected, version: 10.1.1
status: affected, version: 10.2.0.2
status: affected, version: 10.2.2
status: affected, version: 10.1.1.2
status: affected, version: 10.2
}