CVE-2024-25053: IBM Cognos Analytics improper certificate validation
IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, and 12.0.2 is vulnerable to improper certificate validation when using the IBM Planning Analytics Data Source Connection. This could allow an attacker to spoof a trusted entity by interfering in the communication path between IBM Planning Analytics server and IBM Cognos Analytics server. IBM X-Force ID: 283364.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-25053?
The severity of CVE-2024-25053 is classified as high due to the potential for attackers to spoof trusted entities.
How do I fix CVE-2024-25053?
To fix CVE-2024-25053, apply the patches provided by IBM for the affected versions of Cognos Analytics.
Which versions of IBM Cognos Analytics are affected by CVE-2024-25053?
IBM Cognos Analytics versions 11.2.0 through 11.2.4 and 12.0.0 through 12.0.2 are affected by CVE-2024-25053.
What type of vulnerability is CVE-2024-25053?
CVE-2024-25053 is an improper certificate validation vulnerability.
Can CVE-2024-25053 lead to data breaches?
Yes, CVE-2024-25053 can potentially lead to data breaches by allowing attackers to impersonate trusted entities.