CVE-2024-25053

2024-06-2819:15:04

CWE-295

[email protected]

web.nvd.nist.gov

ibm cognos analytics

data source connection

vulnerability

certificate validation

ibm planning analytics

x-force id

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

26.9%

JSON

IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, and 12.0.2 is vulnerable to improper certificate validation when using the IBM Planning Analytics Data Source Connection. This could allow an attacker to spoof a trusted entity by interfering in the communication path between IBM Planning Analytics server and IBM Cognos Analytics server. IBM X-Force ID: 283364.

Affected configurations

Nvd

Node

ibmcognos_analyticsMatch11.2.0

ibmcognos_analyticsMatch11.2.1

ibmcognos_analyticsMatch11.2.2

ibmcognos_analyticsMatch11.2.3

ibmcognos_analyticsMatch11.2.4-

ibmcognos_analyticsMatch12.0.0

ibmcognos_analyticsMatch12.0.1

ibmcognos_analyticsMatch12.0.2

VendorProductVersionCPE
ibmcognos_analytics11.2.0cpe:2.3:a:ibm:cognos_analytics:11.2.0:*:*:*:*:*:*:*
ibmcognos_analytics11.2.1cpe:2.3:a:ibm:cognos_analytics:11.2.1:*:*:*:*:*:*:*
ibmcognos_analytics11.2.2cpe:2.3:a:ibm:cognos_analytics:11.2.2:*:*:*:*:*:*:*
ibmcognos_analytics11.2.3cpe:2.3:a:ibm:cognos_analytics:11.2.3:*:*:*:*:*:*:*
ibmcognos_analytics11.2.4cpe:2.3:a:ibm:cognos_analytics:11.2.4:-:*:*:*:*:*:*
ibmcognos_analytics12.0.0cpe:2.3:a:ibm:cognos_analytics:12.0.0:*:*:*:*:*:*:*
ibmcognos_analytics12.0.1cpe:2.3:a:ibm:cognos_analytics:12.0.1:*:*:*:*:*:*:*
ibmcognos_analytics12.0.2cpe:2.3:a:ibm:cognos_analytics:12.0.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	cognos_analytics	11.2.0	cpe:2.3:a:ibm:cognos_analytics:11.2.0:::::::*
ibm	cognos_analytics	11.2.1	cpe:2.3:a:ibm:cognos_analytics:11.2.1:::::::*
ibm	cognos_analytics	11.2.2	cpe:2.3:a:ibm:cognos_analytics:11.2.2:::::::*
ibm	cognos_analytics	11.2.3	cpe:2.3:a:ibm:cognos_analytics:11.2.3:::::::*
ibm	cognos_analytics	11.2.4	cpe:2.3:a:ibm:cognos_analytics:11.2.4:-::::::
ibm	cognos_analytics	12.0.0	cpe:2.3:a:ibm:cognos_analytics:12.0.0:::::::*
ibm	cognos_analytics	12.0.1	cpe:2.3:a:ibm:cognos_analytics:12.0.1:::::::*
ibm	cognos_analytics	12.0.2	cpe:2.3:a:ibm:cognos_analytics:12.0.2:::::::*