IBM Cognos Command Center Open Redirect Vulnerability Allowing Phishing Attacks

An open redirect vulnerability has been identified in IBM Cognos Command Center versions 10.2.4.1 and 10.2.5. This vulnerability could allow remote attackers to conduct phishing attacks by spoofing URLs and redirecting users to malicious websites that appear trusted. Exploitation of this vulnerability could lead to the theft of sensitive information or facilitate further attacks against the victim.

Impact

Successful exploitation could allow attackers to redirect users to malicious websites, potentially leading to phishing attacks or other forms of deception.

Remediation

Users are advised to upgrade to IBM Cognos Command Center 10.2.5 FP1 IF1, available for download from Fix Central.