7.5
CVE-2024-41777
- EPSS 0.08%
- Published 03.12.2024 18:15:14
- Last modified 11.12.2024 03:22:46
- Source psirt@us.ibm.com
- Teams watchlist Login
- Open Login
IBM Cognos Controller 11.0.0 and 11.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
Data is provided by the National Vulnerability Database (NVD)
Ibm ≫ Cognos Controller Version11.0.0
Ibm ≫ Cognos Controller Version11.0.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.08% | 0.247 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| psirt@us.ibm.com | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
CWE-798 Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.