CVE-2015-5014

IBM Cognos Disclosure Management (CDM) 10.1.x and 10.2.x before 10.2.4 IF10 are affected by a vulnerability that allows man-in-the-middle attackers to gain access by spoofing an executable file during a client upload. Root cause appears tied to input validation in CDM prior to 10.2.4 IF10. No exp...

CVE-2015-5014

IBM Cognos Disclosure Management CDM 10.1.x and 10.2.x before 10.2.4 IF10 allows man-in-the-middle attackers to obtain access by spoofing an executable file during a client upload operation...