CVE-2019-4343

IBM Cognos Analytics (versions 11.0 and 11.1) is affected by CVE-2019-4343 due to overly permissive cross-origin resource sharing, enabling an attacker to access restricted content and transfer private information. The root cause is misconfigured CORS handling in the Cognos web interface, leading...