CVE-2023-40696

CVSS 3.1 Score 5.9 of 10 (medium)

Details

Published May 3, 2024
Updated: May 6, 2024
CWE ID 327

Summary

CVE-2023-40696 is a vulnerability affecting IBM Cognos Controller versions 10.4.1, 10.4.2, and 11.0.0, which utilize weaker than expected cryptographic algorithms, potentially allowing an attacker to decrypt highly sensitive information. The vulnerability has a base severity rating of MEDIUM and a base score of 5.9 according to the Common Vulnerability Scoring System (CVSS) version 3.1. It requires no privileges and does not require user interaction to exploit via the network. The impact score is 3.6, with high confidentiality impact but no integrity or availability impact identified. To remediate this vulnerability, users of the affected products should update to a version that utilizes stronger cryptographic algorithms to ensure the security of their sensitive information and protect against potential attacks on the system's confidentiality.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-40696 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options