CVE-2024-45082
18.12.2024, 17:15
IBM Cognos Analytics11.2.0 through 11.2.4 and 12.0.0 through 12.0.3 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted.
Vendor | Product | Version |
---|---|---|
ibm | cognos_analytics | 11.2.0 ≤ 𝑥 ≤ 11.2.4 |
ibm | cognos_analytics | 12.0.0 ≤ 𝑥 ≤ 12.0.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration