CVE-2025-36057CWE-299

IBM Cognos Analytics Mobile (iOS) authentication bypass

Medium · published July 21, 2025

CVSS v3.1
5.2
EPSS
0%
Percentile
10.7
In the wild
Unconfirmed
What it is

IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22

is vulnerable to authentication bypass by using the Local Authentication Framework library which is not needed as biometric authentication is not used in the application.

The record
Technical detail
CVSS v3.1
5.2 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00210 · 10.7th percentile
Weakness
CWE-299 · Improper Check for Certificate Revocation
Published
2025-07-21T18:10Z
EPSS history
Timeline
  • 21 JUL 18:10Z
    IBM Cognos Analytics Mobile (iOS) authentication bypass
    cvelistv5