PT-2025-17674 · Ibm · Ibm Infosphere Information Server

Published 2025-04-23 · Updated 2025-07-08 · CVE-2025-25045

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server version 11.7

Description The issue allows an authenticated user to obtain sensitive information when a detailed technical error message is returned in a request. This information could be used in further attacks against the system.

Recommendations For IBM InfoSphere Information Server version 11.7, consider restricting access to detailed technical error messages to minimize the risk of information disclosure until a patch is available.

Fix

Generation of Error Message Containing Sensitive Information

Weakness Enumeration

CWE-209

Related Identifiers

BDU:2025-06855

CVE-2025-25045

Affected Products

Ibm Infosphere Information Server

References · 11

• https://bdu.fstec.ru/vul/2025-06855 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-25045 · Security Note
• https://osv.dev/vulnerability/CVE-2025-25045 · Vendor Advisory
• https://t.me/cvenotify/128066 · Telegram Post
• https://t.me/cvenotify/119613 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1915192085633806668 · Twitter Post
• https://twitter.com/CVETracker/status/1915496150418805053 · Twitter Post
• https://ibm.com/support/pages/node/7231332 · Vendor Advisory, Patch
• https://t.me/cvetracker/22240 · Telegram Post
• https://twitter.com/CVEnew/status/1915176497125503385 · Twitter Post
• https://t.me/cvedetector/23625 · Telegram Post