PT-2025-23422 · Ibm · Ibm Infosphere Information Server

Published 2025-05-31 · Updated 2025-06-01 · CVE-2025-1499

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server version 11.7

Description The issue concerns the storage of credential information for database authentication in a cleartext parameter file. This file could be viewed by an authenticated user, potentially exposing sensitive information.

Recommendations For IBM InfoSphere Information Server version 11.7, consider restricting access to the parameter file that stores database authentication credentials to minimize the risk of exploitation. Additionally, review and modify the authentication configuration to avoid storing credentials in cleartext. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

BDU:2025-06398

CVE-2025-1499

Affected Products

Ibm Infosphere Information Server

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-1499 · Security Note
• https://osv.dev/vulnerability/CVE-2025-1499 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-06398 · Security Note
• https://t.me/cvenotify/124264 · Telegram Post
• https://ibm.com/support/pages/node/7233154 · Vendor Advisory, Patch
• https://t.me/cvetracker/25097 · Telegram Post
• https://twitter.com/CVEnew/status/1929143546314969449 · Twitter Post