← CVE Intelligence

CVE-2025-36326

IBM Controller information disclosure PUBLISHED

Description (CNA)

IBM Cognos Controller 11.0.0 through 11.0.1, and IBM Controller 11.1.0 through 11.1.1 could allow an attacker to obtain sensitive information due to the use of hardcoded cryptographic keys for signing session cookies.

Affected (CNA)

Vendor / productVersions
IBM / Cognos Controlleraffected 11.0.0 through 11.0.1
IBM / Controlleraffected 11.1.0 through 11.1.1

CWE

CWE-321

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.