Security

Showing 29

Parameterized url with Azure OIDC has limitation of 4096 Bytes

Unlike IBM Directory Service (Or some Local Authentication Providers) Azure AZ supports only 4096 Bytes in the request url in its authorization end Point. This is causing issue with existing report with large columns passed to Cognos as query stri...

9 days ago in Cognos Analytics / Security 0 Submitted

26 VOTE

enable navigation of users setup in AzureAD for Cognos Analytics setup with OpenID Connect namespace with Azure AD

PAIN POINT: Cognos Analytics admistratos can currently not navegate,view or search users which exist in AZURE AD when Cognos Analytics is setup with OpenID Connect namespace to authenticate with Azure AD; only error prone and time consuming creati...

almost 2 years ago in Cognos Analytics / Security 0 Future consideration

3 VOTE

Improved Customization Section

Within Cognos you have the ability to setup roles where you can customize what shows and what is hidden from a user. The problem is if a user is in multiple roles, any customizations that have been unchecked will enforce deny no matter what the ro...

5 months ago in Cognos Analytics / Security 0 Submitted

3 VOTE

Logoff URL Improvements

There are two scenarios that don't seem to be currently supported in relation to the logoff URL that would be very beneficial. If a session times out due to inactivity, it doesn't appear to redirect to the logoff URL, if configured, which can lead...

5 months ago in Cognos Analytics / Security 0 Future consideration

3 VOTE

Json Key Files for Google Big Query Connections have credentials in Clear Text (Not secured)

When creating Google Big Query connection in Cognos Analytics it requires to add the JSON Key file location in the connection string. The JSON key file is stored on the local Cognos dispatchers and the JSON files will have sensitive security infor...

6 months ago in Cognos Analytics / Security 0 Future consideration

9 VOTE

Enable scheduling when using smartcard and kerberos constrained delegation

Using smartcard to login to CA means no username/pwd are stored in the system. This is a problem when scheduling. Currently scheduling in CA requires saved credentials (username/pwd). Bottom line: a system configured with kerberos constrained dele...

almost 2 years ago in Cognos Analytics / Security 0 Future consideration

9 VOTE

Hide show generated sql

For security reason i would be able to hide to basic users the possibility to show generated sql and so view the internal tables , connection,schema etc.

about 2 years ago in Cognos Analytics / Security 2 Future consideration

2 VOTE

Labeling Cognos Report Outputs using Microsoft Purview Information Protection SDK

We have a business requirement to add a 'Microsoft Purview Information Protection' tags to a Cognos Report during downloads. Adding these tags to the reports will help in tracking Data Leakage in organization after reports are generated.

6 months ago in Cognos Analytics / Security 0 Future consideration

4 VOTE

Non-Path Traversal for PDF viewer

Corporate Web Application Firewalls consider the use of path traversal syntax to be a security violation. Cognos 11.2.1 uses path traversal to render pdf reports interactively. This violates standard web security implementations.

about 1 year ago in Cognos Analytics / Security 3 Not under consideration

2 VOTE

missing input validation

Malicious input of attacker can be restricted.

7 months ago in Cognos Analytics / Security 0 Future consideration

Please enter your email address

FILTER BY CATEGORY