← back
CVE-2025-36017

IBM Controller Information Disclosure

CVSS 6.5 MEDIUMEPSS 0.2%CWE-526
IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 stores unencrypted sensitive information in environmental variables files which can be obtained by an authenticated user.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
IBM · Controller

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →