CVE-2025-14790: IBM InfoSphere Information Server is vulnerable to disclosure of sensitive information
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an attacker to obtain sensitive information due to insufficiently protected credentials.
Other sources
IBM InfoSphere Information Server could allow an attacker to obtain sensitive information due to insufficiently protected credentials.
— IBM
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14790?
CVE-2025-14790 is classified as a high severity vulnerability due to its potential for exposing sensitive information.
How do I fix CVE-2025-14790?
To remediate CVE-2025-14790, apply the security patches provided by IBM for InfoSphere Information Server versions 11.7.0.0 through 11.7.1.6.
What types of sensitive information are affected by CVE-2025-14790?
CVE-2025-14790 could lead to the unauthorized disclosure of credentials and other sensitive information stored within IBM InfoSphere Information Server.
Which versions of IBM InfoSphere Information Server are vulnerable to CVE-2025-14790?
IBM InfoSphere Information Server versions 11.7.0.0 through 11.7.1.6 are affected by CVE-2025-14790.
Is there a workaround for CVE-2025-14790 if I cannot immediately apply the patch?
There are no documented workarounds for CVE-2025-14790, and applying the patch is the recommended course of action.