CVE-2025-36034

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-36034

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.6 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

I

BM InfoSphere DataStage Flow Designer in IBM InfoSphere Information Server 11.7 discloses sensitive user information in API requests in clear text that could be intercepted using man in the middle techniques.

References
Link Resource
https://www.ibm.com/support/pages/node/7237604 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:ibm:infosphere_information_server:11.7:*:*:*:*:*:*:*
History

14 Aug 2025, 20:57

Type Values Removed Values Added
First Time Ibm
Ibm infosphere Information Server
Summary
  • (es) IBM InfoSphere DataStage Flow Designer en IBM InfoSphere Information Server 11.7 revela información confidencial del usuario en solicitudes API en texto claro que podría ser interceptada mediante técnicas de intermediario.
CPE cpe:2.3:a:ibm:infosphere_information_server:11.7:*:*:*:*:*:*:*
References () https://www.ibm.com/support/pages/node/7237604 - () https://www.ibm.com/support/pages/node/7237604 - Vendor Advisory

26 Jun 2025, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-26 16:15

Updated : 2025-08-14 20:57

NVD link : CVE-2025-36034

Mitre link : CVE-2025-36034

CVE.ORG link : CVE-2025-36034

JSON object : View

Products Affected

ibm

CWE
CWE-319

Cleartext Transmission of Sensitive Information