← Back

CVE-2024-25036

nvd nist
Published: Dec 3, 2024Modified: Dec 11, 2024

JSON object

Loading...
3.3
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Exploitability: 1.8 / Impact: 1.4
Source: NVD

Description

IBM Cognos Controller 11.0.0 and 11.0.1 could allow an authenticated user with local access to bypass security allowing users to circumvent restrictions imposed on input fields.

Affected (2)

Ibm
1 product
Cognos Controller
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Cognos Controller
Version 11.0.0
Cognos Controller
Version 11.0.1

Related CWEs

CWE-288
Authentication Bypass Using an Alternate Path or Channel
A product requires authentication, but the product has an alternate path or channel that does not require authentication.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.