IBM Cognos TM1 10.2.0.2 before IF1 and 10.2.2.0 before IF1 allows remote attackers to bypass intended access restrictions by visiting the Rights page and then following a generated link.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cognos_tm1 | Ibm | 10.2.0.2 (including) | 10.2.0.2 (including) |
| Cognos_tm1 | Ibm | 10.2.2.0 (including) | 10.2.2.0 (including) |