CVE-2023-38009: IBM Cognos Mobile Client 1.1 iOS may be vulnerable to information disclosure through man in the middle techniques due to the lack of certificate pinning.

PriorityP428medium5.9CVSS 3.1

AVNACHPRNUINSUCHINAN

EPSS

0.19%

9.2th percentile

IBM Cognos Mobile Client 1.1 iOS may be vulnerable to information disclosure through man in the middle techniques due to the lack of certificate pinning.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ibm	cognos_analytics	—	—
ibm	cognos_analytics_mobile	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.