CVE-2025-25045

IBM InfoSphere Information 11.7 Server authenticated user to obtain sensitive information when a detailed technical error message is returned in a request. This information could be used in further attacks against the system.
References
Link Resource
https://www.ibm.com/support/pages/node/7231332 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:ibm:infosphere_information_server:*:*:*:*:*:*:*:*
OR cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

08 Jul 2025, 19:51

Type Values Removed Values Added
Summary
  • (es) IBM InfoSphere Information 11.7 Server autenticó al usuario para obtener información confidencial cuando se devolvía un mensaje de error técnico detallado en una solicitud. Esta información podría utilizarse en futuros ataques contra el sistema.
First Time Ibm aix
Linux
Microsoft
Ibm
Microsoft windows
Linux linux Kernel
Ibm infosphere Information Server
References () https://www.ibm.com/support/pages/node/7231332 - () https://www.ibm.com/support/pages/node/7231332 - Vendor Advisory
CPE cpe:2.3:a:ibm:infosphere_information_server:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

23 Apr 2025, 23:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-04-23 23:15

Updated : 2025-07-08 19:51


NVD link : CVE-2025-25045

Mitre link : CVE-2025-25045

CVE.ORG link : CVE-2025-25045


JSON object : View

Products Affected

microsoft

  • windows

linux

  • linux_kernel

ibm

  • infosphere_information_server
  • aix
CWE
CWE-209

Generation of Error Message Containing Sensitive Information