CVE-2024-45676

Summary

CVE-2024-45676: IBM Cognos Controller versions 11.0.0 and 11.0.1 contain a vulnerability that enables authenticated users to upload insecure files. This issue arises due to insufficient file type distinction, potentially leading to code injection or other malicious activities. Affected organizations are urged to apply the necessary patches or upgrades to mitigate the risk. Users should exercise caution when handling uploaded files and consider implementing additional security measures.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.