PT-2025-13596 · Ibm · Ibm Infosphere Information Server

Published 2025-03-28 · Updated 2025-07-07 · CVE-2024-51477

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server version 11.7

Description The issue allows an authenticated user to obtain sensitive username information due to an observable response discrepancy.

Recommendations For IBM InfoSphere Information Server version 11.7, update to a version that includes a fix for this issue, as no specific workaround or mitigation measures are provided in the available information.

Fix

Side Channel Attack

Weakness Enumeration

CWE-203

Related Identifiers

CVE-2024-51477

Affected Products

Ibm Infosphere Information Server

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-51477 · Security Note
• https://osv.dev/vulnerability/CVE-2024-51477 · Vendor Advisory
• https://twitter.com/CVEnew/status/1905787766232830166 · Twitter Post
• https://t.me/cvedetector/21489 · Telegram Post
• https://t.me/cvenotify/127874 · Telegram Post
• https://ibm.com/support/pages/node/7185058 · Patch, Vendor Advisory
• https://twitter.com/WolfgangSesin/status/1905824605576515674 · Twitter Post
• https://t.me/cvetracker/20248 · Telegram Post