CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

CVE-2025-33079: IBM Controller information disclosure

6.5 CVSS

Description

IBM Controller 11.0.0, 11.0.1, and 11.1.0 application could allow an authenticated user to obtain sensitive credentials that may be inadvertently included within the source code.

Classification

CVE ID: CVE-2025-33079

CVSS Base Severity: MEDIUM

CVSS Base Score: 6.5

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Problem Types

CWE-256 Plaintext Storage of a Password

Affected Products

Vendor: IBM

Product: Controller, Cognos Controller

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.03% (probability of being exploited)

EPSS Percentile: 6.84% (scored less or equal to compared to others)

EPSS Date: 2025-06-18 (when was this score calculated)

References

https://nvd.nist.gov/vuln/detail/CVE-2025-33079
https://www.ibm.com/support/pages/node/7234720

Timeline