CVE-2024-40703CWE-522

IBM Cognos Analytics information disclosure

Medium · published September 22, 2024

CVSS v3.1
5.5
EPSS
0%
Percentile
3.2
In the wild
Unconfirmed
What it is

IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and IBM Cognos Analytics Reports for iOS 11.0.0.7 could allow a local attacker to obtain sensitive information in the form of an API key. An attacker could use this information to launch further attacks against affected applications.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00142 · 3.2th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2024-09-22T12:20Z
EPSS history
Timeline
  • 22 SEP 12:20Z
    IBM Cognos Analytics information disclosure
    cvelistv5