Reporter Sonal Moon
Content Spoofing Vulnerability in IBM Cognos Analytics Applications
Patch Release - 30 May 2016
Public Release - 03 June 2016
The IBM Security Bulletins associated with this CVE have been published at the following URLs:
IBM Cognos Analytics 11.0 http://www.ibm.com/support/docview.wss?uid=swg21977070IBM Cognos Analytics 10.x http://www.ibm.com/support/docview.wss?uid=swg21983247
Products or solutions and versions affected - IBM Cognos 10.x, 11.0
Summary - IBM Cognos Analytics 10.x and 11.0 applications are affected by Content Spoofing vulnerability which is an attack technique that allows an attacker to inject a malicious payload that is later misrepresented as legitimate content of a web application. This does not require any authentication.