CVE-2019-4175

CVE-2019-4175 describes a weakness in IBM Cognos Controller versions 10.3.0 through 10.4.1, where the software employs cryptographic algorithms that are considered weaker than industry standards. This flaw could enable an unauthenticated attacker to decrypt highly sensitive information, posing a significant confidentiality risk. With a CVSS score of 7.5 (HIGH), the vulnerability is easily exploitable over the network with low attack complexity, requiring no user interaction. Despite its severity, there is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.