5.7
Medium
CVE-2023-38735 IBM Cognos Dashboards on Cloud Pak for Data 4.7.0 could allow a remote attacker to bypass security restrictions,…
Description
IBM Cognos Dashboards on Cloud Pak for Data 4.7.0 could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit this vulnerability and redirect a victim to a phishing site. IBM X-Force ID: 262482.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cognos Dashboards on Cloud Pak for Data | 4.7.0 | No fix stated |
Other CVEs of Cognos Dashboards on Cloud Pak for Data
The 4 CVEs of Cognos Dashboards on Cloud Pak for Data →
CVE-2024-41739
IBM Cognos Dashboards 4.0.7 and 5.0.0 on Cloud Pak for Data could allow a remote attacker to perform unauthorized…
8.8
High
CVE-2023-38276
IBM Cognos Dashboards on Cloud Pak for Data 4.7.0 exposes sensitive information in environment variables which could aid…
5.9
Medium
CVE-2023-38275
IBM Cognos Dashboards on Cloud Pak for Data 4.7.0 exposes sensitive information in container images which could lead…
5.9
Medium