CVE-2023-50324

Medium

Description

IBM Cognos Command Center 10.2.4.1 and 10.2.5 exposes details the X-AspNet-Version Response Header that could allow an attacker to obtain information of the application environment to conduct further attacks. IBM X-Force ID: 275038.

SeverityMedium
CVSS5.3
Exploit probability—
ProductIbm Cognos Command Center
PublishedMar 1, 2024
First seenMar 1, 2024

How to fix

Affected products

ProductAffected versionsFixed in
ibm cognos_command_center10.2.4.1, 10.2.5—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2023-50324 · Ibm Cognos Command Center · Dark Radar