CVE-2025-33079

IBM Controller 11.0.0, 11.0.1, and 11.1.0 application could allow an authenticated user to obtain sensitive credentials that may be inadvertently included within the source code.
References
Link Resource
https://www.ibm.com/support/pages/node/7234720 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:cognos_controller:11.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:cognos_controller:11.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:controller:11.1.0:*:*:*:*:*:*:*

History

09 Jun 2025, 18:49

Type Values Removed Values Added
References () https://www.ibm.com/support/pages/node/7234720 - () https://www.ibm.com/support/pages/node/7234720 - Vendor Advisory
CWE CWE-522
CPE cpe:2.3:a:ibm:controller:11.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:cognos_controller:11.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:cognos_controller:11.0.1:*:*:*:*:*:*:*
First Time Ibm
Ibm controller
Ibm cognos Controller

28 May 2025, 15:01

Type Values Removed Values Added
Summary
  • (es) La aplicación IBM Controller 11.0.0, 11.0.1 y 11.1.0 podría permitir que un usuario autenticado obtenga credenciales confidenciales que podrían estar incluidas inadvertidamente en el código fuente.

27 May 2025, 02:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-05-27 02:15

Updated : 2025-06-09 18:49


NVD link : CVE-2025-33079

Mitre link : CVE-2025-33079

CVE.ORG link : CVE-2025-33079


JSON object : View

Products Affected

ibm

  • cognos_controller
  • controller
CWE
CWE-256

Plaintext Storage of a Password

CWE-522

Insufficiently Protected Credentials