Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-25037 EUVD-2024-22399GHSA-9q87-5v6f-82ph

IBM Cognos Controller information disclosure

Published Jan 7, 2025 · Updated Jan 7, 2025 · Assigned by ibm

Description

IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser.

Affected products

VendorProductAffectedFixed
IBM Controller 11.1.0 —
IBM Cognos Controller 11.0.0 – ≤ 11.0.1 —

References