IBM Controller and IBM Cognos Controller Unencrypted Sensitive Information Vulnerability

A vulnerability exists in IBM Controller versions 11.1.0 through 11.1.1 and IBM Cognos Controller versions 11.0.0 through 11.0.1 FP6. These applications store unencrypted sensitive information in environmental variable files, which can be accessed by an authenticated user.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information.

Remediation

Users are advised to upgrade to IBM Controller version 11.1.2, which is available for download from Passport Advantage. IBM Controller 11.1.2 is also available for Cloud deployment.