PT-2024-24273 · Ibm · Ibm Cognos Command Center

Published 2024-09-26 · Updated 2025-01-07 · CVE-2024-31899

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Cognos Command Center versions 10.2.4.1 through 10.2.5

Description The issue could disclose highly sensitive user information to an authenticated user with physical access to the device.

Recommendations For versions 10.2.4.1 and 10.2.5, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

CWE-256

Related Identifiers

CVE-2024-31899

Affected Products

Ibm Cognos Command Center

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-31899 · Security Note
• https://osv.dev/vulnerability/CVE-2024-31899 · Vendor Advisory
• https://ibm.com/support/pages/node/7149734 · Vendor Advisory
• https://t.me/cvedetector/6416 · Telegram Post
• https://t.me/cvenotify/106665 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1839377556891488495 · Twitter Post
• https://twitter.com/CVEnew/status/1839301743676453147 · Twitter Post