Information Disclosure Vulnerability in IBM Cognos TM1 by IBM

CVE-2016-3037

What is CVE-2016-3037?

IBM Cognos TM1 versions 10.1 and 10.2 are susceptible to an information disclosure vulnerability where an authenticated attacker can exploit a valid session key to retrieve sensitive user passwords. This flaw requires user interaction to facilitate the attack, allowing attackers to gain unauthorized access to user's account information, significantly undermining the security framework of the application. This vulnerability can lead to severe consequences if exploited, including unauthorized account access and data breaches.

References