Title

IBM Cognos Disclosure Management Security Bypass Vulnerability (Cat II impact)

Discussion

IBM has released a security bulletin addressing a security bypass vulnerability in IBM Cognos Disclosure Management. To exploit this vulnerability, an attacker could send a malicious file to a CDM client machine by using a man-in-the-middle mechanism. If successfully exploited, this vulnerability would allow an attacker to bypass security restriction.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-61983

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.