Skip to content
OpenAdvisories
Medium · 5.5 CVE-2024-40703 EUVD-2024-38573GHSA-352f-rwjm-p38m

IBM Cognos Analytics information disclosure

Published Sep 22, 2024 · Updated Sep 22, 2024 · Assigned by ibm

Vendor: IBM Product: Cognos Analytics Product: Cognos Analytics Reports

Description

IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and IBM Cognos Analytics Reports for iOS 11.0.0.7 could allow a local attacker to obtain sensitive information in the form of an API key. An attacker could use this information to launch further attacks against affected applications.

Affected products

VendorProductAffectedFixed
IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3 —
IBM Cognos Analytics Reports 11.0.0.7 —

References