5.9

CVE-2024-25053

IBM Cognos Analytics improper certificate validation

IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, and 12.0.2 is vulnerable to improper certificate validation when using the IBM Planning Analytics Data Source Connection. This could allow an attacker to spoof a trusted entity by interfering in the communication path between IBM Planning Analytics server and IBM Cognos Analytics server.  IBM X-Force ID:  283364.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Cognos Analytics Version 11.2.0
Ibm ≫ Cognos Analytics Version 11.2.1
Ibm ≫ Cognos Analytics Version 11.2.2
Ibm ≫ Cognos Analytics Version 11.2.3
Ibm ≫ Cognos Analytics Version 11.2.4 Update -
Ibm ≫ Cognos Analytics Version 12.0.0
Ibm ≫ Cognos Analytics Version 12.0.1
Ibm ≫ Cognos Analytics Version 12.0.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.28% 0.198
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.9 2.2 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
IBM 5.9 2.2 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-295 Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

https://www.ibm.com/support/pages/node/7156941
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/283364
VDB Entry
https://security.netapp.com/advisory/ntap-20241108-0002/