Skip to content
OpenAdvisories
Medium · 5.7 CVE-2023-38735 EUVD-2023-42510GHSA-9q57-wj63-96j5

IBM Cognos Dashboards improper authentication

Published Oct 22, 2023 · Updated Sep 11, 2024 · Assigned by ibm

Description

IBM Cognos Dashboards on Cloud Pak for Data 4.7.0 could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit this vulnerability and redirect a victim to a phishing site. IBM X-Force ID: 262482.

Affected products

VendorProductAffectedFixed
IBM Cognos Dashboards on Cloud Pak for Data 4.7.0 —

References