CVE-2025-25045

{"id": "CVE-2025-25045", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "psirt@us.ibm.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "published": "2025-04-23T23:15:16.213", "references": [{"url": "https://www.ibm.com/support/pages/node/7231332", "source": "psirt@us.ibm.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Primary", "source": "psirt@us.ibm.com", "description": [{"lang": "en", "value": "CWE-209"}]}], "descriptions": [{"lang": "en", "value": "IBM InfoSphere Information 11.7 Server authenticated user to obtain sensitive information when a detailed technical error message is returned in a request. This information could be used in further attacks against the system."}, {"lang": "es", "value": "IBM InfoSphere Information 11.7 Server autentic\u00f3 al usuario para obtener informaci\u00f3n confidencial cuando se devolv\u00eda un mensaje de error t\u00e9cnico detallado en una solicitud. Esta informaci\u00f3n podr\u00eda utilizarse en futuros ataques contra el sistema."}], "lastModified": "2025-04-29T13:52:47.470", "sourceIdentifier": "psirt@us.ibm.com"}