IBM Cognos Analytics Mobile Authentication Bypass Vulnerability

A vulnerability allowing authentication bypass has been identified in IBM Cognos Analytics Mobile for iOS, versions 1.1.0 through 1.1.22. This issue arises from the application's use of the Local Authentication Framework library, which is unnecessary since biometric authentication is not implemented. The vulnerability could potentially be exploited to bypass authentication mechanisms within the app.

Impact

Exploitation of this vulnerability could lead to unauthorized access by bypassing authentication requirements in the application.

Remediation

Users are advised to update to IBM Cognos Analytics Mobile (iOS) version 1.1.23.