CVE-2024-52902: IBM Cognos Controller information disclosure
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 client application contains hard coded database passwords in source code which could be used for unauthorized access to the system.
Other sources
IBM Controller client application contains hard coded database passwords in source code which could be used for unauthorized access to the system.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-52902?
CVE-2024-52902 is rated as a significant vulnerability due to hard coded database passwords that can lead to unauthorized system access.
How do I fix CVE-2024-52902?
To fix CVE-2024-52902, update the IBM Cognos Controller and IBM Controller to the latest versions that do not contain hard coded database passwords.
What versions are affected by CVE-2024-52902?
CVE-2024-52902 affects IBM Cognos Controller versions 11.0.0 through 11.0.1 FP3 and IBM Controller version 11.1.0.
What is the main risk associated with CVE-2024-52902?
The main risk of CVE-2024-52902 is that an attacker could exploit hard coded passwords to gain unauthorized access to sensitive data.
Who should be concerned about CVE-2024-52902?
Organizations using IBM Cognos Controller or IBM Controller within the stated versions should prioritize addressing CVE-2024-52902 to safeguard their systems.