IBM InfoSphere DataStage Flow Designer Sensitive Information Disclosure Vulnerability

A vulnerability exists in IBM InfoSphere DataStage Flow Designer within IBM InfoSphere Information Server 11.7, where sensitive user information is transmitted in clear text via API requests. This lack of encryption could allow interception of the data through man-in-the-middle attacks.

Impact

Exploitation of this vulnerability could lead to unauthorized interception of sensitive user information transmitted in API requests.

Remediation

Users can upgrade to InfoSphere Information Server versions 11.7.1.0 or 11.7.1.6. Additionally, an interim security patch for InfoSphere DataStage Flow Designer is available.