CVE-2016-8960

CVE-2016-8960 describes a privilege escalation vulnerability in IBM Cognos Business Intelligence 10.2. A lower-privileged user could intercept and reuse a higher-privileged user's cookie from an HTTP request to gain their capabilities. This vulnerability carries a high CVSS score of 8.8, indicating a network-based attack with low complexity that could lead to high impact on confidentiality, integrity, and availability. While no public exploits or active exploitation have been observed, and community discussion is minimal, the potential for unauthorized privilege escalation remains.