CVE-2024-56344

Name of the Vulnerable Software and Affected Versions IBM Cognos Analytics versions 12.0.4 through 12.0.4 FP2 IBM Cognos Analytics versions 12.1.0 through 12.1.3 FP1

Description A failure to properly enable HTTP Strict Transport Security (HSTS), a security mechanism that forces browsers to communicate with a server only over encrypted HTTPS connections, could allow a remote attacker to obtain sensitive information. This can be achieved using man-in-the-middle techniques, where an attacker intercepts communication between the client and the server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.