Security Bulletin: IBM InfoSphere Information Server is affected by an information disclosure vulnerability (CVE-2024-37533)

Summary

An information disclosure vulnerability in InfoSphere Information Server was addressed.

Vulnerability Details

CVEID:CVE-2024-37533
**DESCRIPTION:**IBM InfoSphere Information Server could disclose sensitive user information to another user with physical access to the machine.
CVSS Base score: 2.4
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/294727 for the current score.
CVSS Vector: (CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)

Affected Products and Versions

Remediation/Fixes

| --Apply IBM InfoSphere Information Server version 11.7.1.0
--Apply InfoSphere Information Server version 11.7.1.5
--Apply InfoSphere DataStage security patch

Workarounds and Mitigations

Users of Information Server Manager should not check the “Save password” option while creating new connections.
To clean up connections that were previously created in this manner, clean the cache by following the steps for Information Server Manager, in the “Resolving The Problem” section of technote.