Weaker Cryptographic Algorithms in IBM Cognos Controller Could Lead to Information Decryption

CVE-2023-40696

Summary

IBM Cognos Controller versions 10.4.1, 10.4.2, and 11.0.0 expose sensitive information due to the implementation of cryptographic algorithms that do not meet expected security standards. This vulnerability can be exploited to decrypt sensitive data, posing a significant risk to the confidentiality and integrity of user information. Organizations using affected versions should prioritize updates and evaluate their security posture to mitigate potential risks associated with this issue.

References