What’s Vulnerable › Vulnerabilities
CVE-2024-41778: IBM Controller information disclosure
- Severity: medium (CVSS 6.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-03-01 · updated 2026-06-17
- Weakness: CWE-521
Description
IBM Controller 11.0.0 through 11.0.1 and 11.1.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.
Affected products
- IBM Controller: 11.0.0, 11.0.1, 11.1.0
References
Get alerted when CVE-2024-41778 or the next vulnerability affects your stack