cvedb.io
CVE-2024-40702
HIGH · CVSS 8.2
EPSS exploitation probability: 0%
Published 2025-01-07T16:15:33.463 · Last modified 2026-06-17T07:46:22.590

Summary

IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow an unauthorized user to obtain valid tokens to gain access to protected resources due to improper certificate validation.

Affected products

ibm — cognos_controller

Does this affect you?

Add your gear to cvedb and we'll alert you only when ibm ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.