| Package | Affected versions | Patched versions |
|---|---|---|
| cognos analytics | ≥ 11.0.0.0, ≤ 11.0.12.0 |
IBM Cognos Analytics 11 Configuration tool, under certain circumstances, will bypass OIDC namespace signature verification on its id_token. IBM X-Force ID: 150902.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free