CVE-2025-25046

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server version 11.7

Description The issue concerns the transmission of sensitive information via URL or query parameters, which could be exposed to an unauthorized actor using man-in-the-middle techniques.

Recommendations For IBM InfoSphere Information Server version 11.7, consider configuring the DataStage Flow Designer to use secure communication protocols, such as HTTPS, to encrypt sensitive information transmitted via URL or query parameters. As a temporary workaround, restrict access to sensitive data and limit the use of query parameters to minimize the risk of exposure.