CVE-2024-52902CWE-798

IBM Cognos Controller information disclosure

High · published February 19, 2025

CVSS v3.1
8.8
EPSS
0%
Percentile
28.9
In the wild
Unconfirmed
What it is

IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 client application contains hard coded database passwords in source code which could be used for unauthorized access to the system.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00362 · 28.9th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2025-02-19T14:50Z
EPSS history
Timeline
  • 19 FEB 14:50Z
    IBM Cognos Controller information disclosure
    cvelistv5