CVE-2021-29823

IBM Cognos Analytics (versions 11.1.0–11.1.7 FP4 and 11.2.0–11.2.2) is affected by CSRF (CVE-2021-29823). The root cause is cross-site requests that could perform malicious, unauthorised actions on behalf of trusted users. Remediation: upgrade to 11.2.3 or apply the documented fixes (11.1.7 FP5)....