Volerion logoVolerion
Volerion logoVolerion

IBM InfoSphere Information Server Insecure Direct Object Reference Vulnerability

Vulnerability

A vulnerability allowing Insecure Direct Object Reference (IDOR) has been identified in IBM InfoSphere Information Server versions 11.7.0.0 through 11.7.1.6. This vulnerability arises from an authorization bypass through user-controlled keys, potentially allowing unauthorized access to certain objects or resources.

Impact

Exploitation of this vulnerability could lead to unauthorized access to objects or resources, bypassing normal authorization controls.

Remediation

Users can upgrade to IBM InfoSphere Information Server version 11.7.1.0, 11.7.1.6, or 11.7.1.6 Service Pack 2. Instructions for downloading these versions are available on the IBM Support website.

Added: Mar 25, 2026, 10:19 PM
Updated: Mar 25, 2026, 10:19 PM

Vulnerability Rating

Custom Algorithm
spread
3.1
impact
2.5
exploitability
5.2
remediation
7.7
relevance
4.7
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.