Advisoriesby IbisIBMCVE-2025-36178
IBM Controller: improper quantity validation
No fix yet
IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 could allow an authenticated user to bypass input validation due to improper validation of client-side input of file size.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Controller Product | >= 11.0.0, <= 11.0.1 FP7 | No fix yet |
| >= 11.1.0, <= 11.1.3 FP1 | No fix yet |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-1284