CVE-2021-29892

IBM Cognos Controller 11.0.0 and 11.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...

CVE-2021-29892

IBM Cognos Controller 11.0.0 and 11.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...

CVE-2024-41775 IBM Cognos Controller information disclosure

IBM Cognos Controller 11.0.0 and 11.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

CVE-2024-41775

CVE-2024-41775 affects IBM Cognos Controller 11.0.0–11.0.1. The issue is described as using weaker than expected cryptographic algorithms, enabling an attacker to decrypt highly sensitive information. The IBM security bulletin recommends upgrading to IBM Cognos Controller 11.0.1 FP3 (and notes av...

CVE-2024-41775 IBM Cognos Controller information disclosure

IBM Cognos Controller 11.0.0 and 11.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

CVE-2024-25020

CVE-2024-25020 affects IBM Cognos Controller 11.0.0 and 11.0.1, where uploading attachments on the Journal entry page allows unrestricted filetypes, enabling attackers to upload malicious executables that could be used against victims. The issue is documented across multiple sources linked to the...

CVE-2024-25020 IBM Cognos Controller file upload

IBM Cognos Controller 11.0.0 and 11.0.1 is vulnerable to malicious file upload by allowing unrestricted filetype attachments in the Journal entry page. Attackers can make use of this weakness and upload malicious executable files into the system and can be sent to victims for performing further...

CVE-2024-25020 IBM Cognos Controller file upload

IBM Cognos Controller 11.0.0 and 11.0.1 is vulnerable to malicious file upload by allowing unrestricted filetype attachments in the Journal entry page. Attackers can make use of this weakness and upload malicious executable files into the system and can be sent to victims for performing further...

CVE-2024-41776 IBM Cognos Controller cross-site request forgery

IBM Cognos Controller 11.0.0 and 11.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

CVE-2024-41776

IBM Cognos Controller 11.0.0–11.0.1 is reported vulnerable to cross-site request forgery (CSRF), enabling an attacker to perform malicious actions trusted by authenticated users. The Red Hat and IBM notices confirm this CSRF issue and identify the affected product scope. Remediation is to apply I...

CVE-2024-41776 IBM Cognos Controller cross-site request forgery

IBM Cognos Controller 11.0.0 and 11.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

CVE-2024-41777

CVE-2024-41777 affects IBM Cognos Controller 11.0.0 and 11.0.1. The issue is hard-coded credentials used for inbound authentication, outbound communication, or data encryption, enabling credential disclosure and potential abuse. The entry lists a high severity (CVSS 3.1 base 7.5). Remediation: up...

CVE-2024-41777 IBM Cognos Controller hard coded credentials

IBM Cognos Controller 11.0.0 and 11.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

CVE-2024-41777 IBM Cognos Controller hard coded credentials

IBM Cognos Controller 11.0.0 and 11.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

CVE-2024-45676 IBM Cognos Controller file upload

IBM Cognos Controller 11.0.0 and 11.0.1 could allow an authenticated user to upload insecure files, due to insufficient file type distinction...

CVE-2024-45676

CVE-2024-45676 affects IBM Cognos Controller 11.0.0–11.0.1. The vulnerability is an authenticated-file-upload flaw caused by insufficient file-type distinction, allowing an authenticated user to upload insecure files. IBM notes remediation via IBM Cognos Controller 11.0.1 FP3 (and related cloud/d...

CVE-2024-45676 IBM Cognos Controller file upload

IBM Cognos Controller 11.0.0 and 11.0.1 could allow an authenticated user to upload insecure files, due to insufficient file type distinction...

CVE-2024-25036 IBM Cognos Controller authentication bypass

IBM Cognos Controller 11.0.0 and 11.0.1 could allow an authenticated user with local access to bypass security allowing users to circumvent restrictions imposed on input fields...

CVE-2024-25036 IBM Cognos Controller authentication bypass

IBM Cognos Controller 11.0.0 and 11.0.1 could allow an authenticated user with local access to bypass security allowing users to circumvent restrictions imposed on input fields...

CVE-2024-25036

The CVE-2024-25036 entry concerns IBM Cognos Controller versions 11.0.0 and 11.0.1. Affected component/process: input field restrictions. Root cause: authenticated user with local access could bypass security to circumvent input-field restrictions. Impact: authenticated, local attackers may bypas...