New Security Bulletin for Cognos Command Center 10.1

Abstract A new security bulletin, IBM Cognos Command Center Web Security Vulnerabilities CVE-2013-4000 and CVE-2013-4001, has been published. Content Details on the new security bulletin are available at . This new security bulletin has been published using a new document type, Security Bulletin...

CVE-2013-4000

The CVE-2013-4000 entry concerns IBM Cognos Command Center with multiple CSRF vulnerabilities that allow remote attackers to hijack the administrator session for requests that start or stop services. Affected product: IBM Cognos Command Center prior to version 10.2. The core issue is CSRF in the ...