CVE-2024-40702: IBM Cognos Controller improper certificate validation
IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow an unauthorized user to obtain valid tokens to gain access to protected resources due to improper certificate validation.
Other sources
IBM Controller could allow an unauthorized user to obtain valid tokens to gain access to protected resources due to improper certificate validation.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-40702?
CVE-2024-40702 is considered a critical vulnerability due to the potential for unauthorized access to protected resources.
How do I fix CVE-2024-40702?
To fix CVE-2024-40702, upgrade IBM Cognos Controller to version 11.0.2 or later, or IBM Controller to version 11.1.1 or later.
Who is affected by CVE-2024-40702?
CVE-2024-40702 affects users of IBM Cognos Controller versions 11.0.0 through 11.0.1 and IBM Controller version 11.1.0.
What type of vulnerability is CVE-2024-40702?
CVE-2024-40702 is a vulnerability related to improper certificate validation, allowing unauthorized users to obtain valid tokens.
What are the potential impacts of CVE-2024-40702?
The potential impacts of CVE-2024-40702 include unauthorized access to sensitive resources and data breaches.