{"id":"CVE-2025-36057","aliases":["EUVD-2025-22134","GHSA-5j2h-pwp3-258r"],"status":"published","title":"IBM Cognos Analytics Mobile (iOS) authentication bypass","description":"IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22 \n\nis vulnerable to authentication bypass by using the Local Authentication Framework library which is not needed as biometric authentication is not used in the application.","severity":{"version":"3.1","score":5.2,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.0021,"percentile":0.11244,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-299"],"published":"2025-07-21T18:10:32Z","modified":"2026-06-17T09:14:25Z","products":[{"vendor":"ibm","product":"cognos analytics mobile"},{"vendor":"ibm","product":"cognos_analytics_mobile"}],"references":[{"url":"https://www.ibm.com/support/pages/node/7239635","tags":["vendor-advisory","patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-36057"},{"url":"https://github.com/advisories/GHSA-5j2h-pwp3-258r"}],"sources":{"cve":[{"id":"CVE-2025-36057","title":"IBM Cognos Analytics Mobile (iOS) authentication bypass","description":"IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22 \n\nis vulnerable to authentication bypass by using the Local Authentication Framework library which is not needed as biometric authentication is not used in the application.","status":"published","published":"2025-07-21T18:10:32.157Z","modified":"2025-08-18T01:32:20.671Z","cvss":[{"version":"3.1","score":5.2,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-299"],"updated_at":"2026-11-02T14:32:45.503988Z"}],"euvd":[{"id":"EUVD-2025-22134","description":"IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22 \n\nis vulnerable to authentication bypass by using the Local Authentication Framework library which is not needed as biometric authentication is not used in the application.","status":"published","published":"2025-07-21T18:10:32Z","modified":"2025-08-18T01:32:20Z","cvss":[{"version":"3.1","score":5.2,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T20:31:56.298799Z"}],"ghsa":[{"id":"GHSA-5j2h-pwp3-258r","title":"IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22 \n\nis vulnerable to authentication bypass...","description":"IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22 \n\nis vulnerable to authentication bypass by using the Local Authentication Framework library which is not needed as biometric authentication is not used in the application.","status":"published","published":"2025-07-21T21:31:37Z","modified":"2025-07-21T21:31:37Z","cvss":[{"version":"3.1","score":5.2,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"medium"}],"cwes":["CWE-299"],"updated_at":"2026-11-02T15:03:04.468862Z"}],"nvd":[{"id":"CVE-2025-36057","description":"IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22 \n\nis vulnerable to authentication bypass by using the Local Authentication Framework library which is not needed as biometric authentication is not used in the application.","status":"published","published":"2025-07-21T19:15:28.84Z","modified":"2026-06-17T09:14:25.77Z","cvss":[{"version":"3.1","score":5.2,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-299"],"updated_at":"2026-11-02T14:11:19.382856Z"}]}}