IBM Cognos Analytics Vulnerable to Form Action Hijacking

CVE-2023-32344

Summary

IBM Cognos Analytics versions 11.1.7, 11.2.4, and 12.0.0 are susceptible to form action hijacking. This vulnerability permits an attacker to manipulate the form action attribute, redirecting it to an arbitrary path. Such exploitation can lead to unauthorized access to sensitive data and potential breaches within the affected systems. Organizations utilizing these versions of Cognos Analytics should prioritize security updates and closely monitor their environments to mitigate risks associated with this vulnerability.

References