CVE-2025-33111
BaseFortify
Publication date: 2025-12-08
Last updated on: 2025-12-10
Assigner: IBM Corporation
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| ibm | controller | 11.1.0 |
| ibm | cognos_controller | 11.0.1 |
| ibm | cognos_controller | 11.0.0 |
| ibm | controller | 11.1.1 |
| ibm | controller | From 11.1.0 (inc) to 11.1.2 (inc) |
| ibm | cognos_controller | From 11.0.0 (inc) to 11.0.1.7 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-379 | The product creates a temporary file in a directory whose permissions allow unintended actors to determine the file's existence or otherwise access that file. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in IBM Controller versions 11.1.0 through 11.1.1 and IBM Cognos Controller versions 11.0.0 through 11.0.1 FP6. It involves the creation of temporary files without using atomic operations, which can lead to race condition attacks. Because of this, an authenticated user may be able to access sensitive information that should otherwise be protected.
How can this vulnerability impact me? :
The vulnerability can expose sensitive information to an authenticated user due to race condition attacks on temporary files. This means that unauthorized access to sensitive data could occur, potentially leading to information disclosure.