NetSight
high8.2

CVE-2024-40702

IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow an unauthorized user to obtain valid tokens to gain access to protected resou…

Impact

IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow an unauthorized user to obtain valid tokens to gain access to protected resources due to improper certificate validation.

Affected products

VendorProductAffected versions
IbmCognos Controller
from 11.0.0 through 11.0.1
IbmController
Version 11.1.0

Weakness classification

References