IBM InfoSphere Information Server versions 11.7.0.0 through 11.7.1.6 are affected by an information disclosure vulnerability that can expose configuration data and other sensitive information. The flaw is identified as CWE‑209, indicating improper handling of confidential data that may be inadvertently exposed to unauthorized users.

IBM’s InfoSphere Information Server product, version 11.7.0.0 to 11.7.1.6, running on supported operating systems such as AIX, Linux, and Windows is vulnerable.

The CVSS score of 4.3 reflects moderate severity, while an EPSS score below 1% indicates a low likelihood of current exploitation. KEV does not list this vulnerability, suggesting no widespread active exploitation reports. Based on the description, it is inferred that an attacker would likely need local or privileged access to the affected system to obtain the disclosed information, as the vulnerability stems from improper access control within the application and no remote exploitation vector is detailed.