Cross-Site Request Forgery in IBM Cognos Business Intelligence

CVE-2018-1934

What is CVE-2018-1934?

IBM Cognos Business Intelligence version 10.2.2 is susceptible to cross-site request forgery (CSRF), a vulnerability that enables attackers to execute unauthorized actions by exploiting a trusted user's session. This can lead to potential security breaches, allowing malicious actors to compromise user accounts and perform actions without the consent of the legitimate user. Organizations using this version should implement security measures to mitigate the risk associated with this vulnerability.

References