CVE-2024-28780CWE-327
IBM Cognos Controller information disclosure
Medium · published February 19, 2025
What it is
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 Rich Client
uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
The record
Technical detail
- CVSS v3.1
- 5.9 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00201 · 9.5th percentile
- Weakness
- CWE-327 · Use of a Broken or Risky Cryptographic Algorithm
- Published
- 2025-02-19T15:39Z
EPSS history
Timeline