CVE-2024-41778

MEDIUM

IBM Controller <11.0.1-11.1.0 - Info Disclosure

Title source: llm

Description

IBM Controller 11.0.0 through 11.0.1 and 11.1.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.

References (1)

[Vendor Advisory] https://www.ibm.com/support/pages/node/7184423

Scores

CVSS v3 5.3

EPSS 0.0010

EPSS Percentile 26.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-521

Status published

Products (3)

ibm/controller 11.0.0

ibm/controller 11.0.1

ibm/controller 11.1.0

Published Mar 01, 2025

Tracked Since Feb 18, 2026