CVE-2024-45082: IBM Cognos Analytics HTTP open redirection
IBM Cognos Analytics 11.2.0 through 11.2.4 and 12.0.0 through 12.0.3
could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted.
Other sources
IBM Cognos Analytics could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45082?
CVE-2024-45082 is classified as a medium severity vulnerability that allows remote attackers to execute phishing attacks.
How do I fix CVE-2024-45082?
You can fix CVE-2024-45082 by applying the latest patches provided by IBM for affected versions of Cognos Analytics.
What versions of IBM Cognos Analytics are affected by CVE-2024-45082?
Versions 11.2.0 through 11.2.4 and 12.0.0 through 12.0.3 of IBM Cognos Analytics are affected by CVE-2024-45082.
Can CVE-2024-45082 be exploited without user interaction?
Yes, CVE-2024-45082 can be exploited by persuading a victim to visit a specially crafted website, enabling phishing attacks.
What type of attack is facilitated by CVE-2024-45082?
CVE-2024-45082 facilitates phishing attacks through an open redirect vulnerability.