PT-2025-2608 · Ibm · Ibm Cognos Dashboards

Published 2025-01-24 · Updated 2025-08-14 · CVE-2024-41739

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Cognos Dashboards versions 4.0.7 through 5.0.0

Description The issue is related to dependency confusion, allowing a remote attacker to perform unauthorized actions. This could potentially lead to privilege escalation.

Recommendations For IBM Cognos Dashboards version 4.0.7, update to a version that fixes the dependency confusion issue. For IBM Cognos Dashboards version 5.0.0, update to a version that fixes the dependency confusion issue. As a temporary workaround, consider restricting access to the affected IBM Cognos Dashboards versions until a patch is available.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

BDU:2025-01212

CVE-2024-41739

Affected Products

Ibm Cognos Dashboards

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2024-41739 · Security Note
• https://bdu.fstec.ru/vul/2025-01212 · Security Note
• https://ibm.com/support/pages/node/7177766 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-41739 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1882812294024847680 · Twitter Post
• https://t.me/cvenotify/108478 · Telegram Post
• https://twitter.com/CVEnew/status/1882788054395392226 · Twitter Post
• https://twitter.com/CveFindCom/status/1882791297435488710 · Twitter Post
• https://t.me/cveNotify/132332 · Telegram Post
• https://t.me/cvedetector/16278 · Telegram Post