CVE-2021-20461

Name of the Vulnerable Software and Affected Versions: IBM Cognos Analytics versions 10.0 through 11.1

Description: The issue is related to a weakness in the implementation of the System Appearance configuration setting, which could allow an attacker to bypass business logic and modify the appearance and behavior of the application.

Recommendations: For IBM Cognos Analytics versions 10.0 through 11.1, consider restricting access to the System Appearance configuration setting until a fix is available. As a temporary workaround, consider disabling the modification of the System Appearance configuration setting to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.