IBM Controller and IBM Cognos Controller Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in IBM Controller versions 11.1.0 through 11.1.1 and in IBM Cognos Controller versions 11.0.0 through 11.0.1 FP6. This vulnerability allows an authenticated user to cause a denial of service by exploiting improper validation of quantity size inputs.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the application to become unresponsive or unavailable.

Remediation

Users are advised to upgrade to IBM Controller 11.1.2 or IBM Cognos Controller 11.0.1 FP7. Instructions for downloading these versions are available on the IBM Support website.