PT-2025-7408 · Ibm · Ibm Controller+1

Published 2025-02-18 · Updated 2025-02-19 · CVE-2024-28780

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Cognos Controller versions 11.0.0 through 11.0.1 FP3 IBM Controller version 11.1.0 Rich Client

Description The issue concerns the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information.

Recommendations For IBM Cognos Controller versions 11.0.0 through 11.0.1 FP3, consider updating to a version that uses stronger cryptographic algorithms. For IBM Controller version 11.1.0 Rich Client, consider updating to a version that uses stronger cryptographic algorithms. As a temporary workaround, consider restricting access to sensitive information until a patch is available.

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

BDU:2025-02077

CVE-2024-28780

Affected Products

Ibm Cognos Controller

Ibm Controller

References · 6

• https://ibm.com/support/pages/node/7183597 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-28780 · Security Note
• https://bdu.fstec.ru/vul/2025-02077 · Security Note
• https://osv.dev/vulnerability/CVE-2024-28780 · Vendor Advisory
• https://twitter.com/CVEnew/status/1892240344529481867 · Twitter Post
• https://t.me/cvedetector/18466 · Telegram Post