Skip to content
OpenAdvisories
Medium WID-SEC-2025-0655 8 CVEs

IBM InfoSphere Information Server: Mehrere Schwachstellen

Published Mar 30, 2025 · Updated Mar 30, 2025 · de-DE

Vendor: IBM Product: InfoSphere Information Server Platform: Windows

Summary

Ein entfernter authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM InfoSphere Information Server ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Informationen preiszugeben und Daten zu manipulieren.

Product

IBM InfoSphere Information Server ist eine Softwareplattform zur Integration heterogener Daten.

Vulnerabilities 8

  • High 7.8
    CVE-2025-24789

    Snowflake JDBC allows an untrusted search path on Windows

    Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake. Snowflake discovered and remediated a vulnerability in the Snowflake JDBC Driver. When the EXTERNALBROWSER authentication method is u…

    snowflakedb snowflake-jdbc trino trino-plugin-opensearch Wolfi Maven
  • Medium 6.5
    CVE-2024-31141

    Apache Kafka Clients: Privilege escalation to filesystem read-access via automatic ConfigProvider

    Files or Directories Accessible to External Parties, Improper Privilege Management vulnerability in Apache Kafka Clients. Apache Kafka Clients accept configuration data for customizing behavior, and includes ConfigProvider plugins in order to manipulate these…

    Apache Software Foundation Apache Kafka Clients druid thingsboard-tb-node Wolfi Maven
  • Medium 5.9
    CVE-2024-43382

    Snowflake JDBC Security Advisory

    Snowflake JDBC driver versions >= 3.2.6 and <= 3.19.1 have an Incorrect Security Setting that can result in data being uploaded to an encrypted stage without the additional layer of protection provided by client side encryption.

    trino trino-plugin-opensearch trino-plugin-lakehouse trino-plugin-pinot Wolfi Maven
  • Medium 5.3
    CVE-2024-43186

    IBM InfoSphere Information Server information disclosure

    IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information that is stored locally under certain conditions.

    IBM InfoSphere Information Server
  • Medium 4.4
    CVE-2024-7577

    IBM InfoSphere Information Server information disclosure

    IBM InfoSphere Information Server 11.7 could disclose sensitive user credentials from log files during new installation of the product.

    IBM InfoSphere Information Server
  • Medium 4.4
    CVE-2025-24790

    Snowflake JDBC uses insecure temporary credential cache file permissions

    Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake. Snowflake discovered and remediated a vulnerability in the Snowflake JDBC Driver. On Linux systems, when temporary credential caching…

    snowflakedb snowflake-jdbc trino trino-plugin-opensearch Wolfi Maven
  • Medium 4.3
    CVE-2024-51477

    IBM InfoSphere Information Server information disclosure

    IBM InfoSphere Information Server 11.7 could allow an authenticated to obtain sensitive username information due to an observable response discrepancy.

    IBM InfoSphere Information Server
  • Low 2.7
    CVE-2024-55895

    IBM InfoSphere Information Server information disclosure

    IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.

    IBM InfoSphere Information Server

Revision history

  1. #1

    Initiale Fassung

References