CVE-2024-45084

Summary

CVE-2024-45084 is a vulnerability affecting IBM Cognos Controller versions 11.0.0 through 11.0.1 FP3 and IBM Controller version 11.1.0. This issue permits authenticated attackers to perform formula injection, enabling them to execute arbitrary commands on the system. The vulnerability arises due to insufficient validation of file contents during formula processing. Organizations using impacted versions are advised to apply available patches or upgrades to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.