PT-2025-13597 · Ibm · Ibm Infosphere Information Server

Published 2025-03-28 · Updated 2025-07-08 · CVE-2024-7577

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server version 11.7

Description The issue could disclose sensitive user credentials from log files during the new installation of the product.

Recommendations For IBM InfoSphere Information Server version 11.7, consider restricting access to log files to minimize the risk of sensitive user credential disclosure until a patch is available.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2024-7577

Affected Products

Ibm Infosphere Information Server

References · 9

• https://osv.dev/vulnerability/CVE-2024-7577 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-7577 · Security Note
• https://t.me/cvetracker/20249 · Telegram Post
• https://twitter.com/WolfgangSesin/status/1905822775308071182 · Twitter Post
• https://t.me/cvenotify/128033 · Telegram Post
• https://ibm.com/support/pages/node/7185020 · Patch, Vendor Advisory
• https://t.me/cvedetector/21488 · Telegram Post
• https://twitter.com/CVEnew/status/1905787767151366593 · Twitter Post
• https://twitter.com/WolfgangSesin/status/1905822776054714676 · Twitter Post