CVE-2023-40696: IBM Cognos Controller information disclosure
Published May 3, 2024
·Updated
IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 264939.
Affected Software
3 affected components
IBM Cognos Controller=10.4.1
IBM Cognos Controller=10.4.2
IBM Cognos Controller=11.0.0
Event History
May 3, 2024
CVE Published
via MITRE·05:34 PM
Data Sourced
via MITRE·05:34 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-40696?
CVE-2023-40696 is considered a high-severity vulnerability due to its potential to allow attackers to decrypt sensitive information.
2
How do I fix CVE-2023-40696?
To remediate CVE-2023-40696, upgrade IBM Cognos Controller to a version that utilizes stronger cryptographic algorithms.
3
What versions of IBM Cognos Controller are affected by CVE-2023-40696?
IBM Cognos Controller versions 10.4.1, 10.4.2, and 11.0.0 are affected by CVE-2023-40696.
4
What type of vulnerability is CVE-2023-40696?
CVE-2023-40696 is a cryptographic vulnerability that involves the use of weaker than expected algorithms.
5
Who discovered CVE-2023-40696?
CVE-2023-40696 was reported by IBM X-Force, using the identification number 264939.