CVE-2024-45082

Description

IBM Cognos Analytics 11.2.0 through 11.2.4 and 12.0.0 through 12.0.3 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted.

Reserved 2024-08-21 | Published 2024-12-18 | Updated 2024-12-18 | Assigner ibm

Problem types

CWE-601 URL Redirection to Untrusted Site ('Open Redirect')

Product status

Default status
unaffected

11.2.0
affected

12.0.0
affected

References

www.ibm.com/support/pages/node/7177223 vendor-advisory

cve.org (CVE-2024-45082)

nvd.nist.gov (CVE-2024-45082)

Download JSON