IBM Cognos Controller and IBM Controller Information Disclosure Vulnerability

An information disclosure vulnerability exists in IBM Cognos Controller versions 11.0.0 through 11.0.1 and IBM Controller version 11.1.0. This vulnerability allows remote attackers to access sensitive information by exploiting detailed technical error messages returned in the browser. The exposed information could be used for further attacks against the system.

Impact

Successful exploitation of this vulnerability could lead to unauthorized access to sensitive information, which could be leveraged for additional attacks against the system.

Remediation

Users are advised to upgrade to IBM Cognos Controller 11.0.1 FP3 or IBM Controller 11.1.0.1. Instructions for downloading these versions are available on the IBM Support website.