CVE-2024-56344

MediumCVSS 5.9/10Last modified Sep 28, 2026

Description

IBM Cognos Analytics 12.0.4 through 12.0.4 FP2, and 12.1.0 through 12.1.3 FP1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-327

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Sep 18, 2026
Last modified
Sep 28, 2026
NVD status
Awaiting Analysis

Related CVEs from 2024

CVE-2024-5634610.0IBM AIX 7.2 and 7.3 nimesis NIM master service could allow a remote attacker to execute arbitrary commands due to improper process controls.CVE-2024-563479.6IBM AIX 7.2 and 7.3 nimsh service SSL/TLS protection mechanisms could allow a remote attacker to execute arbitrary commands due to improper CVE-2024-563484.3In JetBrains TeamCity before 2024.12 improper access control allowed viewing details of unauthorized agentsCVE-2024-563495.3In JetBrains TeamCity before 2024.12 improper access control allowed unauthorized users to modify build logsCVE-2024-56359.8A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been declared as critical. Affected by this vulnerabilitCVE-2024-563504.3In JetBrains TeamCity before 2024.12 build credentials allowed unauthorized viewing of projectsCVE-2024-563518.8In JetBrains TeamCity before 2024.12 access tokens were not revoked after removing user rolesCVE-2024-563525.4In JetBrains TeamCity before 2024.12 stored XSS was possible via image name on the agent details pageCVE-2024-563536.5In JetBrains TeamCity before 2024.12 backup file exposed user credentials and session cookiesCVE-2024-563544.9In JetBrains TeamCity before 2024.12 password field value were accessible to users with view settings permissionCVE-2024-563555.4In JetBrains TeamCity before 2024.12 missing Content-Type header in RemoteBuildLogController response could lead to XSSCVE-2024-563567.1In JetBrains TeamCity before 2024.12 insecure XMLParser configuration could lead to potential XXE attack
CVE-2024-56344: Medium severity, CVSS 5.9 | Vulnix