CVE-2024-55907 IBM Cognos Mobile information disclosure
Attackers can reverse engineer the IBM Cognos Mobile iOS app due to weak obfuscation, exposing internal logic and algorithms.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-55907?
CVE-2024-55907 is a low-severity vulnerability in IBM Cognos Analytics Mobile, published on 2 Mar 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
IBM Cognos Analytics Mobile 1.1 for iOS application could allow an attacker to reverse engineer the codebase to gain knowledge about the programming technique, interface, class definitions, algorithms and functions used due to weak obfuscation.
Weakness: CWE-540
Which versions are affected by CVE-2024-55907?
It affects 1 product.
Products include Ibm Cognos Analytics Mobile.
How do I fix CVE-2024-55907?
No fix has been published for CVE-2024-55907 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-55907 being exploited?
There is no known exploitation of CVE-2024-55907 in the wild and no public exploit code.
Other vulnerabilities in IBM Cognos Analytics Mobile
- CVE-2025-36106 IBM Cognos Analytics Mobile (iOS) information disclosure
- CVE-2025-36062 IBM Cognos Analytics Mobile (iOS) information disclosure
- CVE-2025-36107 IBM Cognos Analytics Mobile (iOS) information disclosure
- CVE-2021-39081 IBM Cognos Analytics Mobile information disclosure
- CVE-2021-39079 Cross-site scripting in Cognos Analytics Mobile
Sources
Also known as GHSA-5fx3-6rfx-jp6w.