CVE-2025-33150: IBM Cognos Analytics Certified Containers information disclosure
IBM Cognos Analytics Certified Containers 12.1.0 could disclose package parameter information due to the presence of hidden pages.
Other sources
PostgreSQL JDBC Driver could allow a remote attacker to gain unauthorized access to the system, caused by the exposure of the connection properties for configuring a pgjdbc connection. By specifying arbitrary connection properties, a remote attacker could exploit this vulnerability to gain unauthorized access to the system.
— IBM
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-33150?
CVE-2025-33150 is classified as a medium severity vulnerability due to the potential for unauthorized access to sensitive information.
How do I fix CVE-2025-33150?
To remediate CVE-2025-33150, update IBM Cognos Analytics Certified Containers to the latest version that addresses this vulnerability.
Who is affected by CVE-2025-33150?
Organizations using IBM Cognos Analytics Certified Containers version 12.1.0 or earlier are affected by CVE-2025-33150.
What causes CVE-2025-33150?
CVE-2025-33150 is caused by the exposure of package parameter information through hidden pages in IBM Cognos Analytics.
Can CVE-2025-33150 be exploited remotely?
Yes, CVE-2025-33150 can be exploited remotely, potentially allowing attackers to gain unauthorized access to the system.