CVE-2025-0895
CVSS 3.1 Score 2.4 of 10 (low)
Details
Published Mar 2, 2025
CWE ID 215
Summary
CVE-2025-0895 is a vulnerability affecting IBM Cognos Analytics Mobile 1.1 for Android. This issue grants unauthorized access to sensitive information for users with physical access to the device. The vulnerability stems from debugging code log messages that can be obtained, revealing confidential data. IBM has advised users to implement security measures to restrict access to the device and prevent potential exploitation. Upgrading to the latest version of IBM Cognos Analytics Mobile is also recommended to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- IBM Corporation