DeutschShown in its original language — a full translation is planned for a future version.
IBM InfoSphere Information Server: Mehrere Schwachstellen
view advisory published 2025-03-30
Ein entfernter authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM InfoSphere Information Server ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Informationen preiszugeben und Daten zu manipulieren.
01
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-55895US | medium5.3 | — | ||
IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This infor… | ||||
| CVE-2024-7577US | high7.5 | — | ||
IBM InfoSphere Information Server 11.7 could disclose sensitive user credentials from log files during new installation of the product. | ||||
| CVE-2024-51477US | medium6.5 | — | ||
IBM InfoSphere Information Server 11.7
could allow an authenticated to obtain sensitive username information due to an observable response discrepancy. | ||||
| CVE-2024-43186US | medium6.5 | — | ||
IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information that is stored locally under certain conditions. | ||||
| CVE-2025-24790US | medium5.5OT elevated | — | ||
Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake. Snowflake discovered and remediated a vulnerability in… | ||||
| CVE-2025-24789US | — | — | ||
Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake. Snowflake discovered and remediated a vulnerability in… | ||||
| CVE-2024-31141US | — | — | ||
Files or Directories Accessible to External Parties, Improper Privilege Management vulnerability in Apache Kafka Clients.
Apache Kafka Clients accept configuration data for custom… | ||||
| CVE-2024-43382US | —OT elevated | — | ||
Snowflake JDBC driver versions >= 3.2.6 and <= 3.19.1 have an Incorrect Security Setting that can result in data being uploaded to an encrypted stage without the additional layer o… | ||||
02
references
External citations — patches, advisories, analysis.
- WID-SEC-W-2025-0655 - CSAF Versionself
- WID-SEC-2025-0655 - Portal Versionself
- IBM Security Bulletin vom 2025-03-30external
- IBM Security Bulletin vom 2025-03-30external
- IBM Security Bulletin vom 2025-03-30external
- IBM Security Bulletin vom 2025-03-30external
- IBM Security Bulletin vom 2025-03-30external
- IBM Security Bulletin vom 2025-03-30external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan