CVE-2025-36057 MEDIUM

CVE-2025-36057: IBM Cognos Analytics Mobile (iOS) authentication bypass

Vendor Ibm
Product Cognos Analytics Mobile
Weakness CWE-299
Published July 21, 2025
Last update August 18, 2025
View on NVD All CVEs

CVSS base score

5.2/10
Attack vector Physical
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity High

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

What the vulnerability does

01Description

IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22 is vulnerable to authentication bypass by using the Local Authentication Framework library which is not needed as biometric authentication is not used in the application.

Key dates

02Disclosure timeline

July 21, 2025 CVE published
August 18, 2025 Record updated