CyberSec.Space Logo
Back to CVE Browser

CVE-2016-8960

HIGH
8.8
CVSS Severity Score
EPSS Score0.0980%
EPSS Percentile11.64th
PublishedMar 27, 2017
Last ModifiedMay 13, 2026

Vulnerability Description

IBM Cognos Business Intelligence 10.2 could allow a user with lower privilege Capabilities to adopt the Capabilities of a higher-privilege user by intercepting the higher-privilege user's cookie value from its HTTP request and then reusing it in subsequent requests. IBM Reference #: 1993718.

Affected Platforms (CPE)

📦
Ibm

Cognos Business Intelligence

= 10.2
📦
Ibm

Cognos Business Intelligence

= 10.2.1
📦
Ibm

Cognos Business Intelligence

= 10.2.1.1
📦
Ibm

Cognos Business Intelligence

= 10.2.2

References & Advisories

🔗 http://www.ibm.com/support/docview.wss?uid=swg21993718
🔗 http://www.securityfocus.com/bid/96963
🔗 http://www.ibm.com/support/docview.wss?uid=swg21993718
🔗 http://www.securityfocus.com/bid/96963

Related Vulnerabilities

CVE-2010-149010.0

Unspecified vulnerability in IBM Cognos 8 Business Intelligence before 8.4.1 FP1 has unknown impact and attack vectors.

CVE-2012-48589.3

IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 does not properly ...

CVE-2018-19348.8

IBM Cognos Business Intelligence 10.2.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malic...

CVE-2017-17647.0

IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1, and 10.2.2, under specialized circumstances, could expose plain text cred...