High · 7.3 CVE-2020-4879 EUVD-2020-26126GHSA-mgwf-4gww-g338

IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 could allow a remote attacker to bypass security restrictions, caused by improper validati…

Published Jan 21, 2022 · Updated Sep 16, 2024 · Assigned by ibm

Description

IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 could allow a remote attacker to bypass security restrictions, caused by improper validation of authentication cookies. IBM X-Force ID: 190847.

Affected products

Vendor	Product	Affected	Fixed
IBM	Cognos Controller	10.4.0, 10.4.1, 10.4.2	—

References

https://www.ibm.com/support/pages/node/6509856
ibm-cognos-cve20204879-priv-escalation (190847) vdb-entry