PH05336: CSRM AKA REFLECTED LINK VULNERABILITY IN COGNOS ADMINISTRATION'SMYPROPERTIES FOR BACKURL PARAMETER

APAR status

• Closed as fixed if next.

Error description

• The backURL parameter as used by MyProperties page in Cognos
  Administration is vulnerable to a Client Side Resource
  Manipulation (CSRM) aka Reflected Link vulnerability. An
  attacker can supply a value for the backURL parameter which will
  be reflected by the product in a subsequently generated response
  as part of a meta-refresh leading to the client browser
  following the link to an arbitrary URL.
  This is the perfect 2nd half of a CSRF which combined with
  social engineering and a prepared link can lead to a victim
  accessing a prepared webpage or load a resource like a JS or
  exe.
  

Local fix

• na
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All Users                                                    *
  *                                                              *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See Error Description                                        *
  *                                                              *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Upgrade to IBM Cognos Analytics 11.1.2                       *
  ****************************************************************
  

Problem conclusion

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels