IBM Cognos Command Center Clickjacking Vulnerability

A clickjacking vulnerability has been identified in IBM Cognos Command Center versions 10.2.4.1 and 10.2.5. This vulnerability could allow a remote attacker to hijack the clicking actions of a victim. By convincing the victim to visit a malicious website, the attacker could exploit this issue to take control of the victim's clicks and potentially launch further attacks against them.

Impact

Exploitation of this vulnerability could lead to unauthorized actions being performed on behalf of the victim, potentially allowing for further attacks against them.

Remediation

Users are advised to upgrade to IBM Cognos Command Center 10.2.5 FP1 IF1, available for download from Fix Central.