CVE-2015-7435
Beschrijving NL
IBM Tivoli Common Reporting (TCR) 2.1 vóór IF14, 2.1.1 vóór IF22, 2.1.1.2 vóór IF9, 3.1.0.0 tot 3.1.2 zoals gebruikt in Cognos Business Intelligence vóór 10.2 IF16 en 3.1.2.1 zoals gebruikt in Cognos Business Intelligence vóór 10.2.1.1 IF12 stelt lokale gebruikers in staat om het Cognos Application Firewall (CAF) beschermingsmechanisme te omzeilen via de leidende witruimte in het BackURL-veld.
Origineel (Engels) tonen
IBM Tivoli Common Reporting (TCR) 2.1 before IF14, 2.1.1 before IF22, 2.1.1.2 before IF9, 3.1.0.0 through 3.1.2 as used in Cognos Business Intelligence before 10.2 IF16, and 3.1.2.1 as used in Cognos Business Intelligence before 10.2.1.1 IF12 allows local users to bypass the Cognos Application Firewall (CAF) protection mechanism via leading whitespace in the BackURL field.