IBM Cognos Analytics Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in IBM Cognos Analytics versions 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and 12.0.4. This vulnerability could allow an authenticated user to exhaust memory resources by sending a specially crafted request, potentially leading to service disruption.

Impact

Exploitation of this vulnerability could cause a denial-of-service condition by exhausting memory resources, leading to service disruption.

Remediation

Users of IBM Cognos Analytics versions 12.0.0 to 12.0.4 can upgrade to version 12.0.4 Fix Pack 1. For those using versions 11.2.0 to 11.2.4 IF3, the recommended upgrade is to version 11.2.4 IF4. Instructions for downloading these versions are available on the IBM Support website.