Description
IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22
is vulnerable to authentication bypass by using the Local Authentication Framework library which is not needed as biometric authentication is not used in the application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Cognos Analytics Mobile | 1.1.0 – ≤ 1.1.22 | — |
Advisories 1
- WID-SEC-2025-1617 IBM Cognos Analytics: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 21, 2025
References
- https://www.ibm.com/support/pages/node/7239635 vendor-advisory patch