IBM InfoSphere Information Server 11.7 could disclose sensitive information to an authenticated user that could aid in further attacks against the system through a directory listing.
Weakness
The product inappropriately exposes a directory listing with an index of all the resources located inside of the directory.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Infosphere_information_server | Ibm | 11.7 (including) | 11.7 (including) |
| Infosphere_information_server_on_cloud | Ibm | 11.7 (including) | 11.7 (including) |