CVE-2025-36057

IBM Cognos Analytics Mobile (iOS) versions 1.1.0–1.1.22 contain an authentication bypass due to the use of an unnecessary Local Authentication Framework library, despite biometric authentication not being used in the app. The vulnerability affects the iOS client and is described in multiple sourc...

CVE-2025-36057 IBM Cognos Analytics Mobile (iOS) authentication bypass

IBM Cognos Analytics Mobile iOS 1.1.0 through 1.1.22 is vulnerable to authentication bypass by using the Local Authentication Framework library which is not needed as biometric authentication is not used in the application...

CVE-2025-36057 IBM Cognos Analytics Mobile (iOS) authentication bypass

IBM Cognos Analytics Mobile iOS 1.1.0 through 1.1.22 is vulnerable to authentication bypass by using the Local Authentication Framework library which is not needed as biometric authentication is not used in the application...

CVE-2025-36062 IBM Cognos Analytics Mobile (iOS) information disclosure

IBM Cognos Analytics Mobile iOS 1.1.0 through 1.1.22 could be vulnerable to information exposure due to the use of unencrypted network traffic...

CVE-2025-36062 IBM Cognos Analytics Mobile (iOS) information disclosure

IBM Cognos Analytics Mobile iOS 1.1.0 through 1.1.22 could be vulnerable to information exposure due to the use of unencrypted network traffic...

CVE-2025-36106 IBM Cognos Analytics Mobile (iOS) information disclosure

IBM Cognos Analytics Mobile iOS 1.1.0 through 1.1.22 could allow malicious actors to view and modify information coming to and from the application which could then be used to access confidential information on the device or network by using a the deprecated or misconfigured AFNetworking library ...

CVE-2025-36106

CVE-2025-36106 affects IBM Cognos Analytics Mobile (iOS) 1.1.0–1.1.22. The root cause is use of a deprecated/misconfigured AFNetworking library at runtime, enabling an attacker to view and modify information transmitted by the app and potentially access confidential data on the device or network....

CVE-2025-36106 IBM Cognos Analytics Mobile (iOS) information disclosure

IBM Cognos Analytics Mobile iOS 1.1.0 through 1.1.22 could allow malicious actors to view and modify information coming to and from the application which could then be used to access confidential information on the device or network by using a the deprecated or misconfigured AFNetworking library ...

CVE-2025-36107 IBM Cognos Analytics Mobile (iOS) information disclosure

IBM Cognos Analytics Mobile iOS 1.1.0 through 1.1.22 could allow malicious actors to obtain sensitive information due to the cleartext transmission of data...

CVE-2025-36107

IBM Cognos Analytics Mobile (iOS) versions 1.1.0–1.1.22 are affected by information disclosure due to cleartext transmission of data (CWE-319). The issue is reported in IBM’s Security Bulletin and corresponds to CVE-2025-36107 with a CVSS v3.1 base score of 5.9 (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:...

CVE-2025-36107 IBM Cognos Analytics Mobile (iOS) information disclosure

IBM Cognos Analytics Mobile iOS 1.1.0 through 1.1.22 could allow malicious actors to obtain sensitive information due to the cleartext transmission of data...

CVE-2025-41459

Insufficient protection against brute-force and runtime manipulation in the local authentication component in Two App Studio Journey 5.5.6 on iOS allows local attackers to bypass biometric and PIN-based access control via repeated PIN attempts or dynamic code injection...

CVE-2025-41458

Unencrypted storage in the database in Two App Studio Journey v5.5.9 for iOS allows local attackers to extract sensitive data via direct access to the app’s filesystem...

CVE-2025-41459 Insecure authentication due to missing bruteforce protection and runtime manipulation in Two App Studio Journey 5.5.6 for iOS

Insufficient protection against brute-force and runtime manipulation in the local authentication component in Two App Studio Journey 5.5.6 on iOS allows local attackers to bypass biometric and PIN-based access control via repeated PIN attempts or dynamic code injection...

CVE-2025-41459 Insecure authentication due to missing bruteforce protection and runtime manipulation in Two App Studio Journey 5.5.6 for iOS

Insufficient protection against brute-force and runtime manipulation in the local authentication component in Two App Studio Journey 5.5.6 on iOS allows local attackers to bypass biometric and PIN-based access control via repeated PIN attempts or dynamic code injection...

CVE-2025-41458 Insecure data storage vulnerability in Two App Studio Journey v5.5.9 for iOS

Unencrypted storage in the database in Two App Studio Journey v5.5.9 for iOS allows local attackers to extract sensitive data via direct access to the app’s filesystem...

CVE-2025-41458 Insecure data storage vulnerability in Two App Studio Journey v5.5.9 for iOS

Unencrypted storage in the database in Two App Studio Journey v5.5.9 for iOS allows local attackers to extract sensitive data via direct access to the app’s filesystem...

CVE-2025-41458

CVE-2025-41458 concerns unencrypted storage in the iOS app Two App Studio Journey v5.5.9, allowing local attackers with direct filesystem access to extract sensitive data. The NVD entry lists a CVSS v3.1 base score 5.5 (MEDIUM) , with LOCAL attack vector, LOW attack complexity, and HIGH confident...

PT-2025-30325 · Ibm · Ibm Cognos Analytics Mobile

Name of the Vulnerable Software and Affected Versions: IBM Cognos Analytics Mobile iOS versions 1.1.0 through 1.1.22 Description: IBM Cognos Analytics Mobile iOS is susceptible to a security issue that may allow malicious actors to obtain sensitive information. This is due to the cleartext...

PT-2025-30259 · Unknown · Two App Studio Journey

Name of the Vulnerable Software and Affected Versions: Two App Studio Journey version 5.5.9 Description: The application stores data in an unencrypted format within its database on iOS devices. This allows local attackers to extract sensitive information by directly accessing the application’s...