CVE-2025-36017

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-36017
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-36017.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-36017
Published
2025-12-08T22:15:51.513Z
Modified
2026-03-12T20:19:46.170169Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 stores unencrypted sensitive information in environmental variables files which can be obtained by an authenticated user.

References

Affected packages

Git /

Affected ranges

Database specific

unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "11.1.0"
            },
            {
                "fixed": "11.1.2"
            }
        ]
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-36017.json"