Design/Logic Flaw

2016-01-0221:59:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

IBM Tivoli Common Reporting (TCR) 2.1 before IF14, 2.1.1 before IF22, 2.1.1.2 before IF9, 3.1.0.0 through 3.1.2 as used in Cognos Business Intelligence before 10.2 IF16, and 3.1.2.1 as used in Cognos Business Intelligence before 10.2.1.1 IF12 allows local users to bypass the Cognos Application Firewall (CAF) protection mechanism via leading whitespace in the BackURL field.

CPENameOperatorVersion
tivoli_common_reportingeq3.1.0.2
tivoli_common_reportingeq3.1
tivoli_common_reportingeq3.1.2
tivoli_common_reportingeq3.1.2.1
tivoli_common_reportingeq2.1
tivoli_common_reportingeq2.1.1.2
tivoli_common_reportingeq3.1.0.1
tivoli_common_reportingeq2.1.1

Name	Operator	Version
tivoli_common_reporting	eq	3.1.0.2
tivoli_common_reporting	eq	3.1
tivoli_common_reporting	eq	3.1.2
tivoli_common_reporting	eq	3.1.2.1
tivoli_common_reporting	eq	2.1
tivoli_common_reporting	eq	2.1.1.2
tivoli_common_reporting	eq	3.1.0.1
tivoli_common_reporting	eq	2.1.1

References

www-01.ibm.com/support/docview.wss?uid=swg21972799