IBM Cognos Analytics versions 12.1.0 through 12.1.3 FP1 and 12.0.4 through 12.0.4 FP2 store sensitive information in source code. This vulnerability could allow an authenticated user to leverage this exposure in further attacks against the system. The issue is classified under CWE-540, indicating sensitive information exposure in source code. The CVSS 3.1 base score is 4.3, reflecting a medium severity with low confidentiality impact and no impact on integrity or availability.