medium5.3
CVE-2016-9710
IBM Predictive Solutions Foundation (formerly PMQ) could allow a remote attacker to include arbitrary files.
Impact
IBM Predictive Solutions Foundation (formerly PMQ) could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL to specify a file from the local system, which could allow the attacker to obtain sensitive information. IBM X-Force ID: 119618.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Cognos Business Intelligence Server | Versions 10.1.1, 10.2.0, 10.2.1, 10.2.1.1, 10.2.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.ibm.com/support/docview.wss?uid=swg22004036
- http://www.securityfocus.com/bid/98975
- https://exchange.xforce.ibmcloud.com/vulnerabilities/119618
- http://www.ibm.com/support/docview.wss?uid=swg22004036
- http://www.securityfocus.com/bid/98975
- https://exchange.xforce.ibmcloud.com/vulnerabilities/119618