Description
IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow a privileged user to bypass validation, passing user input into the application as trusted data, due to client-side enforcement of server-side security.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
None
Affected products
- ibm / cognos_controller11.0.0 – 11.0.0
- ibm / cognos_controller11.0.1 – 11.0.1
- ibm / controller11.1.0 – 11.1.0
- ibm / controller11.1.1 – 11.1.1
References
Updated 8m ago · 8 sources