CVE-2025-36057
IBM Cognos Analytics Mobile (iOS) authentication bypass
- State
- Published
- Severity
- 5.2 Medium
- Published
- Jul 21, 2025
- Updated
- Aug 18, 2025
- Reserved
- Apr 15, 2025
Description
IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22
is vulnerable to authentication bypass by using the Local Authentication Framework library which is not needed as biometric authentication is not used in the application.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.2 Medium | CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N | ibm |
Weaknesses
- CWE-299 Authentication Bypass Using an Alternate Path or Channel
Affected Products
| Product | Versions |
|---|---|
Cognos Analytics MobileIBM |
|
References
- https://www.ibm.com/support/pages/node/7239635vendor-advisorypatch
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.