IBM Cognos Controller and IBM Controller Sensitive Information Disclosure Vulnerability

A vulnerability exists in IBM Cognos Controller versions 11.0.0 through 11.0.1 and IBM Controller version 11.1.0, allowing remote attackers to access sensitive information. This issue arises when detailed technical error messages are displayed in the browser, potentially facilitating further attacks against the system.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, which could be used in subsequent attacks against the system.

Remediation

Users are advised to upgrade to IBM Cognos Controller 11.0.1 FP3 or IBM Controller 11.1.0.1. Instructions for downloading these versions are available on the IBM Support website.