漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
IBM Cognos Command Center HTTP Open Redirect
Vulnerability Description
IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Vulnerability Type
指向未可信站点的URL重定向(开放重定向)
Vulnerability Title
IBM Cognos Command Center 输入验证错误漏洞
Vulnerability Description
IBM Cognos Command Center是美国国际商业机器(IBM)公司的一款软件产品,用于帮助组织管理和监控其 IBM Cognos Business Intelligence 解决方案。 IBM Cognos Command Center 10.2.4.1版本和10.2.5版本存在输入验证错误漏洞,该漏洞源于开放重定向攻击,可能导致钓鱼攻击。
CVSS Information
N/A
Vulnerability Type
N/A