CVE-2024-28777: IBM Cognos Controller code execution
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0
is vulnerable to unrestricted deserialization. This vulnerability allows users to execute arbitrary code, escalate privileges, or cause denial of service attacks by exploiting the unrestricted deserialization of types in the application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-28777?
CVE-2024-28777 is classified as a critical vulnerability due to its potential for arbitrary code execution and privilege escalation.
How do I fix CVE-2024-28777?
To fix CVE-2024-28777, update your IBM Cognos Controller to version 11.0.1 FP4 or later, or upgrade IBM Controller to version 11.1.1 or later.
Which versions are affected by CVE-2024-28777?
CVE-2024-28777 affects IBM Cognos Controller versions 11.0.0 through 11.0.1 FP3 and IBM Controller versions up to 11.1.0.
What are the risks associated with CVE-2024-28777?
Exploitation of CVE-2024-28777 can lead to arbitrary code execution, privilege escalation, or denial of service attacks.
Is there a workaround for CVE-2024-28777 if I can't update my software?
Currently, there are no known workarounds for CVE-2024-28777, so upgrading is strongly recommended.