Unrated severityNVD Advisory· Published Sep 5, 2014· Updated May 6, 2026
CVE-2014-0877
CVE-2014-0877
Description
IBM Cognos TM1 10.2.0.2 before IF1 and 10.2.2.0 before IF1 allows remote attackers to bypass intended access restrictions by visiting the Rights page and then following a generated link.
Affected products
2cpe:2.3:a:ibm:cognos_tm1:10.2.0.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ibm:cognos_tm1:10.2.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:cognos_tm1:10.2.2.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www-01.ibm.com/support/docview.wssnvdPatchVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/91064nvd
News mentions
0No linked articles in our index yet.