Security

Showing 42

Implement a relying-party backchannel logout URL to allow for Single Signout.

When integrating Cognos elements into a portal, secured against OIDC namespace, it would be helpful if we could employ token-based single-signout from our OIDC provider, rather than having to force the users to log-out manually from Cognos Analyti...

11 months ago in Cognos Analytics / Security 1 Submitted

5 VOTE

Non-Path Traversal for PDF viewer

Corporate Web Application Firewalls consider the use of path traversal syntax to be a security violation. Cognos 11.2.1 uses path traversal to render pdf reports interactively. This violates standard web security implementations.

about 2 years ago in Cognos Analytics / Security 3 Not under consideration

1 VOTE

Implement functionality where characters and text strings mandated by corporate security can be restricted from Report names, and the Search box.

It has been suggested by security auditors that we should restrict the use of special characters, <script> tags, etc., in the search box within Cognos Analytics, or implement a setting which will restrict the use of all special and meta char...

5 months ago in Cognos Analytics / Security 0 Submitted

6 VOTE

Should be possible to schedule dataset refresh, reports etc using smartcard login together with Kerberos constrained delegation

Users are using smartcard login to CA. This means no username and pwd are stored in AD. Currently scheduling in CA requires saved credentials (username/pwd). On top of that the system is configured with kerberos constrained delegation. A solution ...

almost 3 years ago in Cognos Analytics / Security 0 Not under consideration

3 VOTE

Improved Customization Section

Within Cognos you have the ability to setup roles where you can customize what shows and what is hidden from a user. The problem is if a user is in multiple roles, any customizations that have been unchecked will enforce deny no matter what the ro...

over 1 year ago in Cognos Analytics / Security 0 Not under consideration

3 VOTE

Json Key Files for Google Big Query Connections have credentials in Clear Text (Not secured)

When creating Google Big Query connection in Cognos Analytics it requires to add the JSON Key file location in the connection string. The JSON key file is stored on the local Cognos dispatchers and the JSON files will have sensitive security infor...

over 1 year ago in Cognos Analytics / Security 0 Future consideration

1 VOTE

Allow passing an id_token_hint into the Logout Redirect URL when logging out of OIDC namespaces

With OpenID Providers such as KeyCloak, it has previously been possible to send a user to their logout URL directly, without providing any token. For example: http://{domain-name}/auth/realms/{realm-name}/protocol/openid-connect/logout?redirect_ur...

7 months ago in Cognos Analytics / Security 0 Submitted

4 VOTE

CIS benchmark guide for Cognos Analytics

We are OEM to IBM Cognos Analytics and our internal security teams expect all product owners to submit CIS (security hardening) guidelines document. I am able to find for DB2 at https://www.cisecurity.org/benchmark/ibm_db2 But I can't find any for...

over 2 years ago in Cognos Analytics / Security 0 Future consideration

1 VOTE

Capability to control the api key functionality

We need to create an API key so that an Administrator can restrict access to the api key functionality under the personal menu. This will allow Administrators of the system to control access to this functionality.

8 months ago in Cognos Analytics / Security 0 Submitted

4 VOTE

Cognos Analytics Support for AIP (Azure Information Protection)

Azure Information Protection (AIP) is a cloud-based solution that enables organizations to discover, classify, and protect documents and emails by applying labels to content. AIP is part of the Microsoft Information Protection (MIP) solution, and ...

almost 3 years ago in Cognos Analytics / Security 2 Future consideration

Please enter your email address

FILTER BY CATEGORY