IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow an unauthorized user to obtain valid tokens to gain access to protected resources due to improper certificate validation.
References
| Link | Resource |
|---|---|
| https://www.ibm.com/support/pages/node/7179163 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
03 Jul 2025, 20:49
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:ibm:cognos_controller:*:*:*:*:*:*:*:* cpe:2.3:a:ibm:controller:11.1.0:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* |
|
| References | () https://www.ibm.com/support/pages/node/7179163 - Vendor Advisory | |
| Summary |
|
|
| First Time |
Ibm controller
Microsoft windows Microsoft Ibm Ibm cognos Controller |
07 Jan 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-01-07 16:15
Updated : 2025-07-03 20:49
NVD link : CVE-2024-40702
Mitre link : CVE-2024-40702
CVE.ORG link : CVE-2024-40702
JSON object : View
Products Affected
ibm
- controller
- cognos_controller
microsoft
- windows
CWE
CWE-295
Improper Certificate Validation