CVE-2024-52902

{"id": "CVE-2024-52902", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2025-02-19T15:15:14.660", "references": [{"url": "https://www.ibm.com/support/pages/node/7183597", "tags": ["Vendor Advisory"], "source": "[email protected]"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-798"}]}], "descriptions": [{"lang": "en", "value": "IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 client application contains hard coded database passwords in source code which could be used for unauthorized access to the system."}, {"lang": "es", "value": "Las aplicaciones cliente de IBM Cognos Controller 11.0.0 a 11.0.1 FP3 e IBM Controller 11.1.0 contienen contrase\u00f1as de base de datos codificadas en el c\u00f3digo fuente que podr\u00edan usarse para acceder sin autorizaci\u00f3n al sistema."}], "lastModified": "2025-07-25T19:12:45.100", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:cognos_controller:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "61969629-2718-4106-AE25-861E4586D12F", "versionEndExcluding": "11.0.1.4", "versionStartIncluding": "11.0.0"}, {"criteria": "cpe:2.3:a:ibm:controller:11.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4DB99931-249F-4650-9612-B96803DEE909"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "[email protected]"}