CVE-2025-36017

published 2025-12-08

CVE-2025-36017: IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 stores unencrypted sensitive information in environmental variables…

medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C H I N A N

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 stores unencrypted sensitive information in environmental variables files which can be obtained by an authenticated user.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ibm	controller	>= 11.1.0 < 11.1.2	11.1.2
ibm	controller	11.1.0 – 11.1.1	—

CWE-526