CVE-2024-28780

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-28780
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 Rich Client  uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

5.9 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.ibm.com/support/pages/node/7183597 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:ibm:cognos_controller:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:controller:11.1.0:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
History

25 Jul 2025, 20:28

Type Values Removed Values Added
First Time Microsoft
Ibm
Microsoft windows
Ibm cognos Controller
Ibm controller
Summary
  • (es) IBM Cognos Controller 11.0.0 a 11.0.1 FP3 e IBM Controller 11.1.0 Rich Client utilizan algoritmos criptográficos más débiles de lo esperado que podrían permitir a un atacante descifrar información altamente confidencial.
CPE cpe:2.3:a:ibm:controller:11.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:cognos_controller:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
References () https://www.ibm.com/support/pages/node/7183597 - () https://www.ibm.com/support/pages/node/7183597 - Vendor Advisory

19 Feb 2025, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-19 16:15

Updated : 2025-07-25 20:28

NVD link : CVE-2024-28780

Mitre link : CVE-2024-28780

CVE.ORG link : CVE-2024-28780

JSON object : View

Products Affected

microsoft

  • windows

ibm

  • controller
  • cognos_controller
CWE
CWE-327

Use of a Broken or Risky Cryptographic Algorithm