PT-2025-49598 · Ibm · Ibm Controller+1

Published 2025-12-08 · Updated 2025-12-08 · CVE-2025-33111

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Controller versions 11.1.0 through 11.1.1 IBM Cognos Controller versions 11.0.0 through 11.0.1 FP6

Description The software is susceptible to a race condition during the creation of temporary files without utilizing atomic operations. This can potentially expose sensitive information to an authenticated user. The issue involves the insecure handling of temporary file creation, which could allow an attacker to exploit a timing window to access or modify these files.

Recommendations Update IBM Controller to a version later than 11.1.1. Update IBM Cognos Controller to a version later than 11.0.1 FP6.

Fix

Weakness Enumeration

CWE-379

Related Identifiers

CVE-2025-33111

Affected Products

Ibm Cognos Controller

Ibm Controller

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-33111 · Security Note
• https://osv.dev/vulnerability/CVE-2025-33111 · Vendor Advisory
• https://twitter.com/CVEnew/status/1998145720432447520 · Twitter Post
• https://ibm.com/support/pages/node/7253273 · Patch, Vendor Advisory