CVE-2025-33111

MediumCVSS 4.3

Published: 08/12/2025(UTC)Updated: 07/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

11th percentile - higher than 11% of all known CVEs

Summary

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 are vulnerable to creation of temporary files without atomic operations, which may expose sensitive information to an authenticated user due to race condition attacks.

Risk Assessment

An authenticated user may access confidential data by exploiting race conditions, potentially leading to information leakage.

Recommendation

Apply available security updates for IBM Controller and IBM Cognos Controller or restrict user privileges.

Other vulnerabilities in IBM Controller / IBM Cognos Controller

CVE-2025-36017Medium
IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 store unencrypted sensitive information in environmental variables files, which can be obtained by an authenticated user.

Original NVD description (English source)

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 is vulnerable to creation of temporary files without atomic operations which may expose sensitive information to an authenticated user due to race condition attacks.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS