CVE-2025-36057

MEDIUM

IBM Cognos Analytics Mobile 1.1.0-1.1.22 - Authentication Bypass via Local Authentication Framework

Title source: llm

Description

IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22 is vulnerable to authentication bypass by using the Local Authentication Framework library which is not needed as biometric authentication is not used in the application.

References (1)

Core 1

Core References

Vendor Advisory vendor-advisory patch

https://www.ibm.com/support/pages/node/7239635

Scores

CVSS v3 5.2

EPSS 0.0005

EPSS Percentile 15.1%

Attack Vector PHYSICAL

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-299

Status published

Products (1)

ibm/cognos_analytics_mobile 1.1.0 - 1.1.23

Published Jul 21, 2025

Tracked Since Feb 18, 2026