CVE-2021-39081 MEDIUM

CVE-2021-39081: IBM Cognos Analytics Mobile information disclosure

Vendor Ibm

Product Cognos Analytics Mobile for Android

Weakness CWE-319 · Cleartext transmission

Published December 19, 2024

Last update December 19, 2024

View on NVD All CVEs

CVSS base score

5.9/10

Attack vector Network

Attack complexity High

Privileges required None

User interaction None

Confidentiality High

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

IBM Cognos Analytics Mobile for Android 1.1.14 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

Key dates

02Disclosure timeline

December 19, 2024 CVE published

December 19, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-39081 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/319.html