4.3
CVE-2024-25036
- EPSS 0.01%
- Veröffentlicht 03.12.2024 17:15:09
- Zuletzt bearbeitet 11.12.2024 03:35:51
- Quelle psirt@us.ibm.com
- CVE-Watchlists
- Unerledigt
LoginIBM Cognos Controller authentication bypass
IBM Cognos Controller 11.0.0 and 11.0.1 could allow an authenticated user with local access to bypass security allowing users to circumvent restrictions imposed on input fields.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Cognos Controller Version11.0.0
Ibm ≫ Cognos Controller Version11.0.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.01% | 0.005 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 3.3 | 1.8 | 1.4 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
|
| psirt@us.ibm.com | 4.3 | 2.8 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
|
CWE-288 Authentication Bypass Using an Alternate Path or Channel
The product requires authentication, but the product has an alternate path or channel that does not require authentication.