PT-2014-3914 · Ibm · Ibm Cognos Tm1
Published
2014-09-05
·
Updated
2017-08-29
·
CVE-2014-0877
CVSS v2.0
5.0
Medium
| Vector | AV:N/AC:L/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
IBM Cognos TM1 versions 10.2.0.2 through 10.2.0.2 before IF1
IBM Cognos TM1 versions 10.2.2.0 through 10.2.2.0 before IF1
Description
The issue allows remote attackers to bypass intended access restrictions. This can be achieved by visiting the Rights page and then following a generated link.
Recommendations
For IBM Cognos TM1 version 10.2.0.2, apply IF1 to resolve the issue.
For IBM Cognos TM1 version 10.2.2.0, apply IF1 to resolve the issue.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ibm Cognos Tm1