IBM Cognos Controller Vulnerability Could Lead to Sensitive Information Disclosure

CVE-2021-29892

Summary

IBM Cognos Controller versions 11.0.0 and 11.0.1 are susceptible to a vulnerability that could enable remote attackers to acquire sensitive information. This situation arises from the failure to correctly implement HTTP Strict Transport Security (HSTS), which can be exploited through man-in-the-middle techniques. In the absence of proper security configurations, an attacker can intercept communications, leading to potential data breaches.

References