PT-2025-9213 · Ibm · Ibm Cognos Analytics Mobile

Published 2025-03-02 · Updated 2025-03-04 · CVE-2025-0895

Positive Technologies (AI Summary)

CVSS v3.1

2.4

Low

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Cognos Analytics Mobile version 1.1

Description The issue allows a user with physical access to the device to obtain sensitive information from debugging code log messages.

Recommendations For IBM Cognos Analytics Mobile version 1.1, consider disabling the debugging code log messages as a temporary workaround to minimize the risk of sensitive information disclosure.

Fix

Weakness Enumeration

CWE-215

Related Identifiers

CVE-2025-0895

Affected Products

Ibm Cognos Analytics Mobile

References · 10

• https://osv.dev/vulnerability/CVE-2025-0895 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-0895 · Security Note
• https://t.me/cvedetector/19262 · Telegram Post
• https://twitter.com/cybercronai/status/1896297081750409707 · Twitter Post
• https://twitter.com/WolfgangSesin/status/1896373675143635210 · Twitter Post
• https://twitter.com/cybercronai/status/1896799142212481077 · Twitter Post
• https://t.me/cvenotify/113011 · Telegram Post
• https://twitter.com/CVETracker/status/1896289591012860020 · Twitter Post
• https://ibm.com/support/pages/node/7184430 · Vendor Advisory, Patch
• https://twitter.com/CVEnew/status/1896399762196205705 · Twitter Post