IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow an unauthorized user to obtain valid tokens to gain access to protected resources due to improper certificate validation.
References
| Link | Resource |
|---|---|
| https://www.ibm.com/support/pages/node/7179163 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
03 Jul 2025, 20:49
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Microsoft
Ibm controller Ibm Microsoft windows Ibm cognos Controller |
|
| Summary |
|
|
| References | () https://www.ibm.com/support/pages/node/7179163 - Vendor Advisory | |
| CPE | cpe:2.3:a:ibm:cognos_controller:*:*:*:*:*:*:*:* cpe:2.3:a:ibm:controller:11.1.0:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* |
07 Jan 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-01-07 16:15
Updated : 2025-07-03 20:49
NVD link : CVE-2024-40702
Mitre link : CVE-2024-40702
CVE.ORG link : CVE-2024-40702
JSON object : View
Products Affected
microsoft
- windows
ibm
- controller
- cognos_controller
CWE
CWE-295
Improper Certificate Validation