CVE-2024-40702

—

CVSS 3.1

8.2 high

EPSS

<1%p18

Published

Jan 7, 2025 (Jan 7, 2025)

Modified

Jun 17, 2026

Description

IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow an unauthorized user to obtain valid tokens to gain access to protected resources due to improper certificate validation.

Vendors: ibm
Products: cognos controller, controller
Weakness: CWE-295
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.