Lucene search
PRIOn knowledge basePRION:CVE-2014-4810HistoryNov 05, 2014 - 11:55 a.m.
Authentication flaw
2014-11-0511:55:00
PRIOn knowledge base
www.prio-n.com
3
IBM Cognos Mobile 10.1.1 before FP3 IF1, 10.2.0 before FP2 IF1, and 10.2.1 before FP4 IF1 preserves a session between the Cognos Mobile server and the Cognos Business Intelligence server after a logoff action on a mobile device, which makes it easier for remote attackers to bypass intended Business Intelligence restrictions by leveraging access to authentication data that was captured before this logoff.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cognos_mobile | eq | 10.1.1 | |
| cognos_mobile | eq | 10.2.0 | |
| cognos_mobile | eq | 10.2.1 |
Related
cve
cve
CVE-2014-4810
2014-11-05 11:55:06
cvelist
cvelist
CVE-2014-4810
2014-11-05 11:00:00
nvd
nvd
CVE-2014-4810
2014-11-05 11:55:06