CVEvulnerability

CVE-2015-7435

2.5 LOW Published 2016-01-02 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-01-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
2.5 LOW — CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS 2.0 ([email protected])
1.9 LOW — AV:L/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-254

Description

IBM Tivoli Common Reporting (TCR) 2.1 before IF14, 2.1.1 before IF22, 2.1.1.2 before IF9, 3.1.0.0 through 3.1.2 as used in Cognos Business Intelligence before 10.2 IF16, and 3.1.2.1 as used in Cognos Business Intelligence before 10.2.1.1 IF12 allows local users to bypass the Cognos Application Firewall (CAF) protection mechanism via leading whitespace in the BackURL field.

Affected configurations

• ibm tivoli common reporting 2.1 • ibm tivoli common reporting 2.1.1 • ibm tivoli common reporting 2.1.1.2 • ibm tivoli common reporting 3.1 • ibm tivoli common reporting 3.1.0.1 • ibm tivoli common reporting 3.1.0.2 • ibm tivoli common reporting 3.1.2 • ibm tivoli common reporting 3.1.2.1

Related

Weakness · not in database (1)

References