Medium · 4.3 CVE-2019-4231 EUVD-2019-13838GHSA-5fmg-h5hp-6vj5

IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unaut…

Published Dec 20, 2019 · Updated Sep 17, 2024 · Assigned by ibm

Description

IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 159356.

Affected products

Vendor	Product	Affected	Fixed
IBM	Cognos Analytics	11.0, 11.1	—

References

https://www.ibm.com/support/pages/node/1138588
ibm-cognos-cve20194231-csrf (159356) vdb-entry
https://security.netapp.com/advisory/ntap-20200103-0003/