IBM Cognos Controller and IBM Controller Incorrect Authorization Vulnerability Allowing Content Modification

Vulnerability

An incorrect authorization vulnerability has been identified in IBM Cognos Controller versions 11.0.0 through 11.0.1 FP3, as well as in IBM Controller 11.1.0. This vulnerability could enable an authenticated user to modify restricted content.

Impact

Exploitation of this vulnerability could lead to unauthorized modifications of restricted content.

Remediation

Users are advised to upgrade to IBM Cognos Controller 11.0.1 FP4 or IBM Controller 11.1.0.1. For Cloud deployments, these versions are already available.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
5.2
impact
2.5
exploitability
5.4
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.