CVE-2019-4174: IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 allows web pages to be stored locally whic...

Security readout for executives and security teams

This is a local information disclosure issue in IBM Cognos Controller. Affected versions can store web pages locally, allowing another user on the same system to read them. The business concern is exposure of sensitive reporting or financial content on shared systems, not remote takeover. Exposure is limited to organizations running the listed IBM Cognos Controller versions, especially where multiple users can access the same host or local profile storage. The provided sources do not identify other IBM products as affected. Treat as a targeted cleanup item, not an emergency. Prioritize remediation where Cognos Controller handles sensitive finance data or runs on shared systems. The risk is confidentiality leakage between local users, with no sourced evidence of active exploitation. Mitigation focus: Inventory IBM Cognos Controller versions across managed systems.; Review IBM advisory 10886913 and apply the vendor-listed remediation.; Prioritize shared, kiosk, terminal, or multi-user systems first..

Prepared

Jun 1, 2026, 14:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.