CVE-2025-25046

LOW

3.7

Beschreibung

IBM InfoSphere Information Server 11.7 DataStage Flow Designer transmits sensitive information via URL or query parameters that could be exposed to an unauthorized actor using man in the middle techniques.

CVE Details

CVSS v3.1 Bewertung3.7

SchweregradLOW

CVSS VektorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

AngriffsvektorNETWORK

KomplexitatHIGH

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht4/23/2025

Zuletzt geandert8/12/2025

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

ibm:infosphere_information_server

Schwachen (CWE)

CWE-319

Referenzen

https://www.ibm.com/support/pages/node/7231333(psirt@us.ibm.com)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.