Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
IBM Cognos Dashboards improper authentication
Vulnerability Description
IBM Cognos Dashboards on Cloud Pak for Data 4.7.0 could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit this vulnerability and redirect a victim to a phishing site. IBM X-Force ID: 262482.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N
Vulnerability Type
认证机制不恰当
Vulnerability Title
IBM Cognos Dashboards on Cloud Pak for Data 授权问题漏洞
Vulnerability Description
IBM Cognos Dashboards on Cloud Pak for Data是美国国际商业机器（IBM）公司的一款业务智能工具。 IBM Cognos Dashboards on Cloud Pak for Data 4.7.0版本存在安全漏洞，该漏洞源于可能允许远程攻击者绕过由反向tabnabbing缺陷引起的安全限制，攻击者利用此漏洞可以将受害者重定向到网络钓鱼站点。
CVSS Information
N/A
Vulnerability Type
N/A