CVE-2025-25046 — Cleartext Transmission of Sensitive Info in IBM Infosphere Information Server

CWE-319 — Cleartext Transmission of Sensitive Info3 documents3 sources
Severity
3.7LOWNVD
EPSS
0.1%
top 74.36%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Infosphere Information Server
Timeline
PublishedApr 23
Latest updateApr 24

Description

IBM InfoSphere Information Server 11.7 DataStage Flow Designer transmits sensitive information via URL or query parameters that could be exposed to an unauthorized actor using man in the middle techniques.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 2.2 | Impact: 1.4

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-cw7c-pjp5-3xw3: IBM InfoSphere Information Server 11↗2025-04-24
▶
CVEList
IBM InfoSphere Information Server information disclosure↗2025-04-23
▶
CVE-2025-25046 — IBM vulnerability | cvebase