CVE-2025-25046: IBM InfoSphere Information Server information disclosure
IBM InfoSphere DataStage Flow Designer transmits sensitive information via URL or query parameters that could be exposed to an unauthorized actor using man in the middle techniques.
Other sources
IBM InfoSphere Information Server 11.7 DataStage Flow Designer
transmits sensitive information via URL or query parameters that could be exposed to an unauthorized actor using man in the middle techniques.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-25046?
CVE-2025-25046 is classified as a high-severity vulnerability due to its potential for exposing sensitive information.
How do I fix CVE-2025-25046?
To fix CVE-2025-25046, apply the available patch provided by IBM for InfoSphere Information Server version 11.7.
What versions of IBM InfoSphere Information Server are affected by CVE-2025-25046?
CVE-2025-25046 affects IBM InfoSphere Information Server version 11.7 and earlier.
What type of sensitive information is transmitted in CVE-2025-25046?
CVE-2025-25046 transmits sensitive information via URL or query parameters.
What kind of attack is CVE-2025-25046 vulnerable to?
CVE-2025-25046 is vulnerable to man-in-the-middle attacks that could expose sensitive information.