CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
CVE-2024-52902: IBM Cognos Controller information disclosure
8.8
CVSS
Description
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 client application contains hard coded database passwords in source code which could be used for unauthorized access to the system.
Classification
CVE ID: CVE-2024-52902
CVSS Base Severity: HIGH
CVSS Base Score: 8.8
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products
Vendor: IBM
Product: Cognos Controller
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.05% (probability of being exploited)
EPSS Percentile: 12.77% (scored less or equal to compared to others)
EPSS Date: 2025-03-20 (when was this score calculated)