VDB
CVE-2024-25036
CVE-2024-25036
PUBLISHED
CVSS 4.3 MEDIUM
IBM Cognos Controller authentication bypass
Reported by ibm · Published December 3, 2024
IBM Cognos Controller 11.0.0 and 11.0.1 could allow an authenticated user with local access to bypass security allowing users to circumvent restrictions imposed on input fields.
Risk scores
CVSS 3.1
4.3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Affected products
| Vendor | Product | Versions |
|---|---|---|
| IBM | Cognos Controller | 11.0.0, 11.0.1 |
| IBM | Cognos Controller | 11.0.0, 11.0.1 |
Timeline
- Dec 3, 2024 CVE Published
- Dec 3, 2024 CVE Updated
- Dec 4, 2024 EPSS Score (30 in total, the first dated here)
- Jan 25, 2025 Coalition ESS Score (15 in total, the first dated here)
- Jun 2, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2024-25036
vulnetix vdb fixes CVE-2024-25036Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2024-25036/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart