What is GHSA-3c28-79gw-647j?

GHSA-3c28-79gw-647j is a security advisory published by GitHub Security Advisories with Medium severity. IBM Cognos Analytics 12.0.4 through 12.0.4 FP2, and 12.1.0 through 12.1.3 FP1 could allow a...

Which CVE IDs does GHSA-3c28-79gw-647j cover?

GHSA-3c28-79gw-647j covers the following CVE IDs: CVE-2024-56344. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-3c28-79gw-647j?

GHSA-3c28-79gw-647j has a CVSS v3 base score of 5.9, published by GitHub Security Advisories.

GHSA-3c28-79gw-647jMediumCVSS 5.9

IBM Cognos Analytics 12.0.4 through 12.0.4 FP2, and 12.1.0 through 12.1.3 FP1 could allow a...

Vendor

GitHub Security Advisories

Published

September 18, 2026

Last Modified

September 18, 2026

🔗 CVE IDs covered (1)

CVE-2024-56344 →

📋 Description

IBM Cognos Analytics 12.0.4 through 12.0.4 FP2, and 12.1.0 through 12.1.3 FP1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2024-56344
https://www.ibm.com/support/pages/node/7287211
https://github.com/advisories/GHSA-3c28-79gw-647j