IBM Cognos Controller Hard-Coded Credentials Vulnerability

CVE-2024-41777

Summary

The vulnerability allows unauthorized access due to the presence of hard-coded credentials within IBM Cognos Controller versions 11.0.0 and 11.0.1. These credentials can be utilized for inbound authentication processes, facilitate outbound communications with external components, or be employed for the encryption of sensitive internal data. Organizations using these affected versions are advised to assess their security posture and consider remediation to safeguard their systems.

References