Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
IBM Cognos Mobile 10.1.1 before FP3 IF1, 10.2.0 before FP2 IF1, and 10.2.1 before FP4 IF1 preserves a session between the Cognos Mobile server and the Cognos Business Intelligence server after a logoff action on a mobile device, which makes it easier for remote attackers to bypass intended Business Intelligence restrictions by leveraging access to authentication data that was captured before this logoff.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM Cognos Mobile 权限许可和访问控制漏洞
Vulnerability Description
IBM Cognos Mobile Server是美国IBM公司的一套用于移动设备中的商业智能解决方案。该方案支持利用功能丰富的客户端，在安全性极高的环境内查看Cognos报表、仪表盘、指标、分析及其他信息。 IBM Cognos Mobile中存在安全漏洞，该漏洞源于程序在移动设备上执行下线操作后，仍保存Cognos Mobile服务器和Cognos Business Intelligence服务器之间的会话。远程攻击者可通过访问服务器之间的会话数据利用该漏洞绕过既定的Business Intellig
CVSS Information
N/A
Vulnerability Type
N/A