← Back

CVE-2025-33111

nvd nist
Published: Dec 8, 2025Modified: Jun 17, 2026

JSON object

Loading...
4.3
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Exploitability: 2.8 / Impact: 1.4
Source: psirt@us.ibm.com (Secondary)

Description

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 is vulnerable to creation of temporary files without atomic operations which may expose sensitive information to an authenticated user due to race condition attacks.

Affected (2)

Ibm
2 products
Cognos Controller
Controller
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Cognos Controller
From 11.0.0 to 11.0.1.7
Controller
From 11.1.0 to 11.1.2

Related CWEs

CWE-379
Creation of Temporary File in Directory with Insecure Permissions
The product creates a temporary file in a directory whose permissions allow unintended actors to determine the file's existence or otherwise access that file.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.