← Back

CVE-2025-0895

nvd nist
Published: Mar 2, 2025Modified: Jun 17, 2026

JSON object

Loading...
2.4
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Exploitability: 0.9 / Impact: 1.4
Source: psirt@us.ibm.com (Secondary)

Description

IBM Cognos Analytics Mobile 1.1 for Android could allow a user with physical access to the device, to obtain sensitive information from debugging code log messages.

Affected (1)

Ibm
1 product
Cognos Analytics Mobile
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Cognos Analytics Mobile
From 1.1.0 to 1.1.21

Related CWEs

CWE-215
Insertion of Sensitive Information Into Debugging Code
The product inserts sensitive information into debugging code, which could expose this information if the debugging code is not disabled in production.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.