MEDIUM🇬🇧 English

CVE-2025-36017

CVSS 6.5v3.1pub. 2025-12-08upd. 2025-12-10

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 stores unencrypted sensitive information in environmental variables files which can be obtained by an authenticated user.

oryginał EN

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

IBM Controller
APP
Ibm
11.1.0 – 11.1.2 (bez)

🔵

ZWERYFIKUJ U PRODUCENTA

Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.

CWE

CWE-526

Referencje

www.ibm.com/support/pages/node/7253283…

Powiązane podatności

CVE-2026-5065HIGH8.8ten sam produkt

IBM Controller 11.0.1, 11.1.0, 11.1.1, and 11.1.2 contains hard-coded credentials, such as a password or crypt...

CVE-2024-45084HIGH8.0ten sam produkt

IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 could allow an authenticated attac...

CVE-2023-47160HIGH8.2ten sam produkt

IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 is vulnerable to an XML Extern...

CVE-2024-28777HIGH8.8ten sam produkt

IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 is vulnerable to unrestricted de...

CVE-2024-52902HIGH8.8ten sam produkt

IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 client application contains hard cod...