MEDIUM🇵🇱 Wersja polska

CVE-2025-36017

CVSS 6.5v3.1pub. 2025-12-08upd. 2025-12-10

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 stores unencrypted sensitive information in environmental variables files which can be obtained by an authenticated user.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

  • IBM Controller

    APP
    Ibm
    11.1.0 – 11.1.2 (bez)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2026-5065HIGH8.8ten sam produkt

IBM Controller 11.0.1, 11.1.0, 11.1.1, and 11.1.2 contains hard-coded credentials, such as a password or crypt...

CVE-2024-45084HIGH8.0ten sam produkt

IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 could allow an authenticated attac...

CVE-2023-47160HIGH8.2ten sam produkt

IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 is vulnerable to an XML Extern...

CVE-2024-28777HIGH8.8ten sam produkt

IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 is vulnerable to unrestricted de...

CVE-2024-52902HIGH8.8ten sam produkt

IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 client application contains hard cod...