EUVD-2025-210955
GHSA-cj3f-8q6r-wpp9
Severity by source
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
'Attacker on a shared network' maps to AV:A; the required MITM/interception position gives AC:H; no auth needed (PR:N); confidentiality-only (C:H) via weak network crypto.
Primary rating from Vendor (ibm).
CVSS VectorNVD
Lifecycle Timeline
1DescriptionNVD
IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 could allow an attacker on a shared network to obtain sensitive information caused by insecure network communication.
AnalysisAI
Information disclosure in IBM Cognos Analytics 12.1.0 through 12.1.3 FP1 and 12.0.4 through 12.0.4 FP2 allows an unauthenticated attacker on a shared network segment to capture sensitive data because the product uses insecure network communication (CWE-327). Exploitation requires the attacker to achieve a man-in-the-middle or traffic-capture position on the same network, making it impractical over the open internet; the impact is limited to confidentiality. The vendor CVSS score of 5.9 is a fair reflection of the moderate risk, no public exploit code has been identified, and a vendor patch is available.
Technical ContextAI
IBM Cognos Analytics is a business intelligence and analytics platform that exchanges data over the network. The vulnerability stems from the use of a broken or risky cryptographic algorithm (CWE-327) in its network communications, which can allow an attacker who intercepts traffic on a shared network (e.g., same LAN, VLAN, or Wi-Fi) to decrypt or capture sensitive information. The CPE string cpe:2.3:a:ibm:cognos_analytics:*:*:*:*:*:*:*:* identifies the product family, but only versions 12.1.0 through 12.1.3 FP1 and 12.0.4 through 12.0.4 FP2 are confirmed affected. Our independent assessment adjusts the attack vector from the vendor's CVSS:3.1/AV:N to AV:A (adjacent) because the attacker must be positioned on the same network segment to achieve a man-in-the-middle or traffic-capture position; this requirement is also reflected in the high attack complexity (AC:H). The impact is confined to confidentiality (C:H), with no integrity or availability effect, and no authentication is required (PR:N).
RemediationAI
Apply the vendor-released patch as detailed in the IBM advisory at https://www.ibm.com/support/pages/node/7287209; patch availability is confirmed per vendor. As a compensating control, enforce strong cryptographic algorithms (e.g., TLS 1.2 or higher with approved cipher suites) for all IBM Cognos Analytics network communications and isolate the Cognos Analytics server on a trusted, segmented network to prevent unauthorized adjacent access. Note that enforcing strong crypto may require upgrading client software, and network segmentation may limit legitimate remote access. Consult the advisory for the exact fixed build, as no specific patch version is provided in the source data.
More in Cognos Analytics
View allIBM Cognos Analytics 11.1.7 11.2.0, and 11.2.1 could be vulnerable to a Server-Side Request Forgery Attack (SSRF) attack
IBM Cognos Anaytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML dat
IBM Cognos Analytics 11 could allow a remote attacker to traverse directories on the system. Rated critical severity (CV
IBM Cognos Analytics 11.2.0 through 11.2.4 FP4 and 12.0.0 through 12.0.4 is vulnerable to an Expression Language (EL) In
IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site request forgery (CSRF) in the My Inbox page which cou
IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to priviledge escalation where a lower evel user could have access
IBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated user to execute code remotely due to incorrectly neu
IBM Cognos Analytics 11.2.0 through 11.2.4 and 12.0.0 through 12.0.2 is vulnerable to injection attacks in application l
IBM Cognos Analytics 11.0 and 11.1 could be vulnerable to a denial of service attack by failing to catch exceptions in a
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to an XML External Entity Injection (XXE) attack when proc
IBM Cognos Analytics 11.2.0 through 11.2.4 FP4 and 12.0.0 through 12.0.4 could be vulnerable to malicious file upload by
IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to execute arbitrary code on the system, caused by a CS
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today