CVE-2025-1138

Summary

IBM InfoSphere Information Server 11.7 could disclose sensitive information to an authenticated user that could aid in further attacks against the system through a directory listing.

Affected Software

VendorProductVersion RangeStatus
IBMInfoSphere Information Server11.7affected

Weaknesses

  • CWE-548: CWE-548 Exposure of Information Through Directory Listing

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References