CVE-2023-38009CWE-295

IBM Cognos Analytics Mobile information disclosure

Medium · published January 26, 2025

CVSS v3.1
4.2
EPSS
0%
Percentile
9.3
In the wild
Unconfirmed
What it is

IBM Cognos Mobile Client 1.1 iOS may be vulnerable to information disclosure through man in the middle techniques due to the lack of certificate pinning.

The record
Technical detail
CVSS v3.1
4.2 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00200 · 9.3th percentile
Weakness
CWE-295 · Improper Certificate Validation
Published
2025-01-26T15:57Z
EPSS history
Timeline
  • 26 JAN 15:57Z
    IBM Cognos Analytics Mobile information disclosure
    cvelistv5