IBM Cognos Controller Vulnerability: Weak Cryptographic Algorithms Expose Sensitive Data
CVE-2024-41775

7.5HIGH

Key Information:

Vendor

IBM
Status
Cognos Controller
Vendor
CVE Published:
3 December 2024

What is CVE-2024-41775?

IBM Cognos Controller versions 11.0.0 and 11.0.1 are impacted by a vulnerability that stems from the use of cryptographic algorithms deemed weaker than necessary. This weakness may lead to the decryption of highly sensitive information, which poses a significant risk to organizations utilizing this software. Effective measures should be considered to mitigate the potential exposure, ensuring that robust encryption methodologies are employed to safeguard sensitive data.

References

https://www.ibm.com/support/pages/node/7177220

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.