Security Bulletin: IBM Cognos Disclosure Management could allow a malicious attacker to execute commands as a lower privileged user that opens a malicious document (CVE-2016-6077)

Summary A specific usage scenario of IBM Cognos Disclosure Management could allow an Excel Macro execution on the client machine. Vulnerability Details CVEID: CVE-2016-6077 DESCRIPTION: IBM Cognos Disclosure Management could allow a remote attacker to insert a specially crafted Macro inside an...

CVE-2016-6077

IBM Cognos Disclosure Management 10.2 could allow a malicious attacker to execute commands as a lower privileged user that opens a malicious document. IBM Reference : 1991584...

CVE-2016-6077

IBM Cognos Disclosure Management 10.2 (affected: 10.2.0–10.2.6) contains CVE-2016-6077, where a crafted Macro in an exported CSV could cause Excel Macro execution on the client and potentially execute commands as a lower privileged user. Remediation: apply Cognos Disclosure Management 10.2.5 Inte...