« Volver al listado

CVE-2025-25046

Estado: AnalizadaBaja (3.7)—

IBM InfoSphere Information Server 11.7 DataStage Flow Designer

transmits sensitive information via URL or query parameters that could be exposed to an unauthorized actor using man in the middle techniques.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

IBM — Infosphere Information Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-25046",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-25046",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-04-24T14:53:29.585082Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@us.ibm.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 3.7,
          "attackVector": "NETWORK",
          "baseSeverity": "LOW",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 2.2
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:infosphere_information_server:11.7:*:*:*:*:*:*:*"
          ],
          "vendor": "IBM",
          "product": "InfoSphere Information Server",
          "versions": [
            {
              "status": "affected",
              "version": "11.7"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-04-23T23:15:16.357",
  "references": [
    {
      "url": "https://www.ibm.com/support/pages/node/7231333",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@us.ibm.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-319"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM InfoSphere Information Server 11.7 DataStage Flow Designer \n\ntransmits sensitive information via URL or query parameters that could be exposed to an unauthorized actor using man in the middle techniques."
    },
    {
      "lang": "es",
      "value": "IBM InfoSphere Information Server 11.7 DataStage Flow Designer transmite información confidencial a través de URL o parámetros de consulta que podrían quedar expuestos a un actor no autorizado que utilice técnicas de intermediario."
    }
  ],
  "lastModified": "2026-06-17T09:00:12.060",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_information_server:11.7:*:*:*:-:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "40285C4D-2736-4B86-9DAF-44D83EF30925"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}