Race Condition Vulnerability in IBM Controller and Cognos Controller

CVE-2025-33111

What is CVE-2025-33111?

IBM Controller versions 11.1.0 to 11.1.1 and IBM Cognos Controller versions 11.0.0 to 11.0.1 FP6 are susceptible to a race condition vulnerability. This issue allows for the creation of temporary files without atomic operations, potentially leading to exposure of sensitive information to authenticated users. Attackers leveraging this vulnerability can exploit the race condition to manipulate file access, which underscores the importance of timely patching and securing applications against such weaknesses.

References