Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

cognos-analytics

IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, and 12.0.2 is vulnerable to improper certificate validation when using the IBM Planning Analytics Data Source Connection. This could allow an attacker to spoof a trusted entity by interfering in the communication path between IBM Planning Analytics server and IBM Cognos Analytics server.  IBM X-Force ID:  283364.

CVE-2024-25053 is a vulnerability classified under CWE-295 (Improper Certificate Validation) affecting IBM Cognos Analytics versions 11.2.0 through 12.0.2. The issue arises specifically when using the IBM Planning Analytics Data Source Connection, where the product fails to properly validate certificates during communication between the IBM Planning Analytics server and the IBM Cognos Analytics server. This improper validation can be exploited by an attacker positioned in the communication path (man-in-the-middle scenario) to spoof a trusted entity, effectively impersonating one of the servers. The vulnerability does not require any privileges or user interaction, but the attack complexity is high, meaning the attacker must have the capability to intercept and manipulate network traffic between the two servers. The impact is primarily on data integrity, as the attacker could inject or alter data or commands exchanged between the servers, potentially leading to incorrect analytics results or unauthorized actions. Confidentiality and availability are not directly impacted by this vulnerability. No public exploits have been reported yet, but the presence of this flaw in widely used enterprise analytics software presents a significant risk. The CVSS v3.1 score of 5.9 reflects a medium severity, driven by network attack vector, no privileges required, no user interaction, and high attack complexity. The vulnerability affects multiple recent versions of IBM Cognos Analytics, indicating a broad exposure for organizations using these versions in conjunction with IBM Planning Analytics. IBM has not yet published patches at the time of this report, so organizations must rely on compensating controls until updates are available.

Detailed information about CVE-2024-25053: CWE-295 Improper Certificate Validation in IBM Cognos Analytics affecting IBM Cognos Analytics. Get real-time updates

CVE-2024-25053: CWE-295 Improper Certificate Validation in IBM Cognos Analytics - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-25053: CWE-295 Improper Certificate Validation in IBM Cognos Analytics

Threats Tagged 'cve-2024-25053'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-25053'

Lead Pen Test Professional