IBM Cognos Controller Vulnerability: Weak Cryptographic Algorithms Expose Sensitive Data
CVE-2020-4874

7.5HIGH

Key Information:

Vendor

IBM

Vendor
CVE Published:
3 May 2024

What is CVE-2020-4874?

The vulnerability in IBM Cognos Controller arises from the use of weaker than expected cryptographic algorithms, which could potentially allow unauthorized access to highly sensitive information. As a result, attackers may exploit this flaw to decrypt critical data, compromising the security and confidentiality of the information handled by the IBM Cognos Controller. Organizations utilizing these specific versions of Cognos Controller should assess their security posture and take necessary actions to mitigate potential risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

Cognos Controller 10.4.1, 10.4.2, 11.0.0

References

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.