Improper Handling of Unexpected Data Type in on-headers - CVE-2025-7339

Vulnerability identifier: #VU114392

CSH Severity: Low

CVSS v4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-7339

CWE-ID: CWE-241

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to excessive data output by the application. A remote attacker can inadvertently modify response headers when an array is passed to `response.writeHead()`

on-headers
watsonx Orchestrate Developer Edition
Guardium Data Security Center (GDSC)
watsonx Orchestrate Cartridge for IBM Cloud Pak for Data
Knowledge Catalog Premium Cartridge
WatsonX BI Assistant
Db2 Big SQL
Maximo Application Suite - Monitor Component
Rational Performance Tester
DevOps Test Performance
Business Automation Insights
watsonx Assistant Cartridge
watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component
IBM Watson Discovery for IBM Cloud Pak for Data
IBM Watson Knowledge Catalog in Cloud Pak for Data
IBM Business Automation Workflow
IBM Cloud Pak for Business Automation
Communications Unified Assurance
Event Streams
IBM Cognos Controller
IBM API Connect
IBM DataPower Gateway
OpenShift Data Foundation (formerly OpenShift Container Storage)

Install updates from vendor's website.

on-headers - update to 1.1.0
watsonx Orchestrate Developer Edition - update to 1.13.0
Guardium Data Security Center (GDSC) - update to 3.8.8
watsonx Orchestrate Cartridge for IBM Cloud Pak for Data - update to 5.2.2
Knowledge Catalog Premium Cartridge - update to 5.2
IBM Watson Discovery for IBM Cloud Pak for Data - update to 5.3.0
IBM Watson Knowledge Catalog in Cloud Pak for Data - update to 5.2
WatsonX BI Assistant - update to 5.2.1
Db2 Big SQL - update to 8.2
Maximo Application Suite - Monitor Component - addressed in versions 8.10.25, 8.11.23, 9.0.15, 9.1.5
Event Streams - update to 12.2.2
IBM API Connect - update to 10.0.8.5
IBM DataPower Gateway - addressed in versions 10.5.0.19, 10.6.0.7, 10.6.5.0
DevOps Test Performance - update to 11.0.8
Business Automation Insights - update to 25.0.0.0.1
OpenShift Data Foundation (formerly OpenShift Container Storage) - update to 4.20.14
watsonx Assistant Cartridge - update to 5.3.0
watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component - update to 5.3.0
IBM Cognos Controller - addressed in versions 11.0.1 FP7, 11.1.2 FP1
IBM Cloud Pak for Business Automation - addressed in versions 24.0.0-IF006, 24.0.1-IF005, 25.0.0-IF001

• https://cna.openjsf.org/security-advisories.html
• https://github.com/expressjs/morgan/issues/315
• https://github.com/jshttp/on-headers/commit/c6e384908c9c6127d18831d16ab0bd96e1231867
• https://github.com/jshttp/on-headers/issues/15
• https://github.com/jshttp/on-headers/security/advisories/GHSA-76c9-3jph-rj3q

• Improper Handling of Unexpected Data Type in jshttp on-headers
• Multiple vulnerabilities in IBM Business Automation Workflow
• Multiple vulnerabilities in IBM Business Automation Insights
• IBM WatsonX BI Assistant update for node.js middleware
• Multiple vulnerabilities in IBM Cloud Pak for Business Automation
• IBM DataPower Gateway update for on-headers
• Multiple vulnerabilities in Communications Unified Assurance
• IBM watsonx Orchestrate Developer Edition update for on-headers
• Multiple vulnerabilities in IBM API Connect
• IBM Maximo Application Suite - Monitor Component update for on-headers
• Multiple vulnerabilities in IBM Controller
• IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge update for on-headers
• IBM Db2 Big SQL on Cloud Pak for Data update for on-headers
• IBM Watson Discovery Cartridge update for on-headers
• Multiple vulnerabilities in IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data
• IBM Event Streams update for on-headers
• Multiple vulnerabilities in IBM Knowledge Catalog Premium Cartridge
• Multiple vulnerabilities in IBM Guardium Data Security Center
• IBM DevOps Test Performance update for on-headers
• Multiple vulnerabilities in IBM Watson Knowledge Catalog on-prem
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) 4.20