CVE-2024-25053

Опубликовано: 28 июн. 2024

Источник: nvd

CVSS3: 5.9

EPSS Низкий

Описание

IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, and 12.0.2 is vulnerable to improper certificate validation when using the IBM Planning Analytics Data Source Connection. This could allow an attacker to spoof a trusted entity by interfering in the communication path between IBM Planning Analytics server and IBM Cognos Analytics server. IBM X-Force ID: 283364.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/283364
VDB Entry
https://www.ibm.com/support/pages/node/7156941
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/283364
VDB Entry
https://security.netapp.com/advisory/ntap-20241108-0002/
https://www.ibm.com/support/pages/node/7156941
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:cognos_analytics:11.2.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.2.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.2.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.2.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:11.2.4:-:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:12.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:12.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_analytics:12.0.2:*:*:*:*:*:*:*

EPSS

Процентиль: 23%

0.00078

Низкий

5.9 Medium

CVSS3

Дефекты

CWE-295

Связанные уязвимости

GHSA-whx9-2vf8-4hvm