Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Filtered by product Cognos Mobile
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-4810 1 Ibm 1 Cognos Mobile 2024-02-28 4.3 MEDIUM N/A
IBM Cognos Mobile 10.1.1 before FP3 IF1, 10.2.0 before FP2 IF1, and 10.2.1 before FP4 IF1 preserves a session between the Cognos Mobile server and the Cognos Business Intelligence server after a logoff action on a mobile device, which makes it easier for remote attackers to bypass intended Business Intelligence restrictions by leveraging access to authentication data that was captured before this logoff.