CVE-2022-34357

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Feb 26, 2024
Updated: Dec 17, 2024
CWE ID 770

Summary

CVE-2022-34357 is a Denial of Service vulnerability affecting IBM Cognos Analytics Mobile Server versions 11.1.7, 11.2.4, and 12.0.0. The issue stems from insufficient rate limiting, allowing a malicious actor to send an unlimited number of HTTP requests. Over time, this can exhaust server resources, making the service unavailable for other legitimate users. IBM X-Force has assigned ID 230510 to this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • IBM Cognos Analytics

Affected Vendors

  • IBM Corporation
  • NetApp

Advisories, Assessments, and Mitigations