First published: Tue Feb 18 2025(Updated: )
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 could allow an authenticated user to modify restricted content due to incorrect authorization checks.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Cognos Controller | >=11.0.0<=11.0.1 FP3 | |
IBM Cognos Controller | ||
IBM Cognos Controller | <=11.0.0 - 11.0.1 FP3 | |
IBM Cognos Controller | <=11.1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-45081 has been rated as a high severity vulnerability due to the potential unauthorized modification of restricted content.
To remediate CVE-2024-45081, users should apply the latest security patch provided by IBM for affected versions of Cognos Controller and IBM Controller.
CVE-2024-45081 affects users of IBM Cognos Controller versions 11.0.0 to 11.0.1 FP3 and IBM Controller version 11.1.0.
CVE-2024-45081 enables authenticated users to modify restricted content due to insufficient authorization checks.
If CVE-2024-45081 is discovered in your system, it is recommended to immediately implement the latest patches and review user access levels to ensure compliance.