PT-2025-30322 · Ibm · Ibm Cognos Analytics Mobile

Published 2025-07-21 · Updated 2025-08-07 · CVE-2025-36057

Positive Technologies (AI Summary)

CVSS v3.1

5.2

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

Name of the Vulnerable Software and Affected Versions IBM Cognos Analytics Mobile (iOS) versions 1.1.0 through 1.1.22

Description The application uses the Local Authentication Framework library despite not utilizing biometric authentication. This results in an authentication bypass.

Recommendations IBM Cognos Analytics Mobile (iOS) versions 1.1.0 through 1.1.22: Remove the unnecessary Local Authentication Framework library.

Fix

Weakness Enumeration

CWE-299

Related Identifiers

CVE-2025-36057

Affected Products

Ibm Cognos Analytics Mobile

References · 5

• https://osv.dev/vulnerability/CVE-2025-36057 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-36057 · Security Note
• https://ibm.com/support/pages/node/7239635 · Vendor Advisory, Patch
• https://t.me/cveNotify/131179 · Telegram Post
• https://twitter.com/CVEnew/status/1947369696975896779 · Twitter Post