CVE-2025-14974 is an authorization bypass vulnerability classified under CWE-639 affecting IBM InfoSphere Information Server versions 11.7.0.0 through 11.7.1.6. The issue arises from an Insecure Direct Object Reference (IDOR), where user-controlled keys can be manipulated to bypass authorization controls, potentially exposing sensitive information. The CVSS v3.1 base score is 5.7, reflecting a medium severity with attack vector as adjacent network, low attack complexity, low privileges required, no user interaction, and high confidentiality impact but no integrity or availability impact. No vendor advisory or patch information is provided, and the product is not a cloud service.

An attacker with low privileges on the affected IBM InfoSphere Information Server versions can bypass authorization controls to access sensitive data, impacting confidentiality. There is no impact on integrity or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the IBM vendor advisory for current remediation guidance. Since no official patch or fix information is provided, organizations should monitor IBM's security advisories for updates. Until a fix is available, restrict access to the affected versions and limit user privileges as much as possible to reduce exposure.