IBM InfoSphere Information Server Sensitive Information Disclosure Vulnerability

A sensitive information disclosure vulnerability has been identified in IBM InfoSphere Information Server version 11.7. This vulnerability allows authenticated users to access sensitive information through detailed technical error messages returned in response to requests. The disclosed information could potentially be exploited in further attacks against the system.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, which could be used to facilitate additional attacks on the system.

Remediation

Users can upgrade to IBM InfoSphere Information Server version 11.7.1.0 or 11.7.1.6. Additionally, a security patch for IBM DataStage Flow Designer is available. Note that this security fix impacts the usage of the DataStage Flow Designer APIs, which require explicit login and logout calls before and after other API invocations.