CVE Vulnerabilities

CVE-2025-1499

Cleartext Storage of Sensitive Information

Published: Jun 01, 2025 | Modified: Jun 09, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

IBM InfoSphere Information Server 11.7 stores credential information for database authentication in a cleartext parameter file that could be viewed by an authenticated user.

Weakness

The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

Affected Software

Name Vendor Start Version End Version
Infosphere_information_server Ibm 11.7 (including) 11.7 (including)
Infosphere_information_server_on_cloud Ibm 11.7 (including) 11.7 (including)

Potential Mitigations

References