NVD

Id
32715  
Name
CVE-2014-4810  
Description
IBM Cognos Mobile 10.1.1 before FP3 IF1, 10.2.0 before FP2 IF1, and 10.2.1 before FP4 IF1 preserves a session between the Cognos Mobile server and the Cognos Business Intelligence server after a logoff action on a mobile device, which makes it easier for remote attackers to bypass intended Business Intelligence restrictions by leveraging access to authentication data that was captured before this logoff.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-11-05  
Modified Date
2014-11-05  
Seq
2014-4810  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
172135 32715 CVE-2014-4810 http://www-01.ibm.com/support/docview.wss?uid=swg21684608  View
172136 32715 CVE-2014-4810 ibm-cognos-cve20144810-sec-bypass(95386)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16358 JVNDB-2014-005233 IBM Cognos Mobile における Business Intelligence の制限を回避される脆弱性 IBM Cognos Mobile は、モバイルデバイスでのログオフアクション後、Cognos Mobile サーバと Cognos Business Intelligence サーバの間のセッションを保持するため、Business Intelligence の制限を回避される脆弱性が存在します。 CVE-2014-4810 72099 CVE-2014-4810 32715 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005233.html 2014-10-28 2014-11-06 View