Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-28778 EUVD-2024-25864GHSA-6hqr-x7j2-4jmh

IBM Cognos Controller information disclosure

Published Jan 7, 2025 · Updated Jan 7, 2025 · Assigned by ibm

Description

IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 is vulnerable to exposure of Artifactory API keys. This vulnerability allows users to publish code to private packages or repositories under the name of the organization.

Affected products

VendorProductAffectedFixed
IBM Controller 11.1.0 —
IBM Cognos Controller 11.0.0 – ≤ 11.0.1 —

References