CVE-2024-25036: IBM Cognos Controller authentication bypass
IBM Cognos Controller 11.0.0 and 11.0.1
could allow an authenticated user with local access to bypass security allowing users to circumvent restrictions imposed on input fields.
Other sources
IBM Cognos Controller could allow an authenticated user with local access to bypass security allowing users to circumvent restrictions imposed on input fields.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-25036?
The severity of CVE-2024-25036 is considered moderate due to the potential for authenticated users to bypass security restrictions.
How do I fix CVE-2024-25036?
To fix CVE-2024-25036, it is recommended to update IBM Cognos Controller to the latest version available from IBM.
What versions of IBM Cognos Controller are affected by CVE-2024-25036?
CVE-2024-25036 affects IBM Cognos Controller versions 11.0.0 and 11.0.1.
Who is impacted by CVE-2024-25036?
Authenticated users with local access to IBM Cognos Controller are primarily impacted by CVE-2024-25036.
What type of vulnerability is CVE-2024-25036?
CVE-2024-25036 is a security bypass vulnerability that allows users to circumvent restrictions on input fields.