IBM WFSS Ideas Portal

 Welcome!

 

Our team welcomes any feedback and suggestions you have for improving our offerings. This forum allows us to connect your product improvement ideas with IBM product and engineering teams.

 

For product documentation, see Knowledge Center.
Create and View Support Cases and Use the Discussion Forum here

 

Reminder: This is not the place to submit defects or support needs, please use normal support channel for these cases

 

The shorter URL for this site is:   http://ibm.biz/WFS-Ideas

IBMers, please visit the WFSS Internal Ideas portal https://ibm.biz/WFS-Internal-Ideas

Cognos to better handle requests within its web-inf folder

It is possible to craft a URL to make a request for items within the Cognos web-inf folder and a specific error message is returned indicating the resource is present. This gives useful information to potential hackers. see screenshot attached.
  • Avatar32.5fb70cce7410889e661286fd7f1897de Guest
  • Mar 29 2019
  • Is A Defect
Component Reporting
Priority High - Critical
  • Attach files