Skip to content
OpenAdvisories
Medium · 5.9 CVE-2024-28780 EUVD-2024-25866GHSA-p37p-7h4r-xmh4

IBM Cognos Controller information disclosure

Published Feb 19, 2025 · Updated Jul 25, 2025 · Assigned by ibm

Description

IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 Rich Client 

uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

Affected products

VendorProductAffectedFixed
IBM Cognos Controller 11.0.0 – ≤ 11.0.1 —
IBM Controller 11.1.0 —

Advisories 1

References