CVEvulnerability

CVE-2025-36017

6.5 MEDIUM Published 2025-12-08 Modified 2026-10-07 Official page ↗
Status
Analyzed
Published
2025-12-08
Last modified
2026-10-07
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-526

Description

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 stores unencrypted sensitive information in environmental variables files which can be obtained by an authenticated user.

Affected configurations

• ibm controller (>= 11.1.0 < 11.1.2)

Related

Weakness · CWE (1)

  • CWE-526 Cleartext Storage of Sensitive Information in an Environment Variable weakness

References