CVE-2024-41739: IBM Cognos Dashboards on Cloud Pak for Data privilege escalation
Published Jan 24, 2025
·Updated
IBM Cognos Dashboards 4.0.7 and 5.0.0 on Cloud Pak for Data could allow a remote attacker to perform unauthorized actions due to dependency confusion.
Affected Software
3 affected components
IBM Cognos Dashboards>=4.0.7<=5.0.0
IBM Cognos Dashboards on Cloud Pak for Data=4.8.0
IBM Cognos Dashboards on Cloud Pak for Data=5.0.0
Event History
Jan 24, 2025
CVE Published
via MITRE·01:37 PM
Data Sourced
via MITRE·01:37 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-41739?
CVE-2024-41739 has a high severity rating due to its potential for unauthorized access by remote attackers.
2
How do I fix CVE-2024-41739?
To fix CVE-2024-41739, ensure that you update IBM Cognos Dashboards to the latest version that addresses the dependency confusion vulnerability.
3
What versions of IBM Cognos Dashboards are affected by CVE-2024-41739?
CVE-2024-41739 affects IBM Cognos Dashboards versions 4.0.7 to 5.0.0.
4
Can CVE-2024-41739 be exploited remotely?
Yes, CVE-2024-41739 can be exploited remotely, allowing attackers to perform unauthorized actions.
5
What should I do if I am using an affected version of IBM Cognos Dashboards?
If you are using an affected version of IBM Cognos Dashboards, you should immediately apply the necessary security updates to mitigate the vulnerability.