CVE-2015-5014

IBM Cognos Disclosure Management 10.1.x and 10.2.x < 10.2.4 IF10 - Executable File Spoofing via Client Upload

Title source: llm
STIX 2.1

Description

IBM Cognos Disclosure Management (CDM) 10.1.x and 10.2.x before 10.2.4 IF10 allows man-in-the-middle attackers to obtain access by spoofing an executable file during a client upload operation.

References (1)

Core 1
Core References
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21967228

Scores

EPSS 0.0146
EPSS Percentile 70.3%

Details

CWE
CWE-20
Status published
Products (5)
ibm/cognos_disclosure_management 10.2.0
ibm/cognos_disclosure_management 10.2.1
ibm/cognos_disclosure_management 10.2.2
ibm/cognos_disclosure_management 10.2.3
ibm/cognos_disclosure_management 10.2.4
Published Oct 26, 2015
Tracked Since Feb 18, 2026