5.5

CVE-2025-1993

Medienbericht

IBM App Connect Enterprise Certified Container information disclosure

IBM App Connect Enterprise Certified Container 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, 12.7, 12.8, 12.9, and 12.10 DesignerAuthoring instances store their flows in a database that is protected by weaker than expected cryptographic algorithms that could be decrypted by a local user.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.7.0 Update r4 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.11.1 Update r1 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.11.2 Update r1 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.11.3 Update r1 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12 Update r1 SwEdition lts
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12 Update r10 SwEdition lts
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12.0 Update r1 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12.0 Update r2 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12.2 Update r1 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12.3 Update r1 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12.4 Update r1 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12.5 Update r1 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 13.0.1.0 Update r1 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 13.0.1.0 Update r2 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 13.0.1.1 Update r1 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 13.0.2.0 Update r1 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 13.0.2.1 Update r1 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 13.0.2.2 Update r1 SwEdition continuous_delivery
Ibm ≫ App Connect Enterprise Certified Containers Operands Version 13.0.2.2 Update r2 SwEdition continuous_delivery
Ibm ≫ App Connect Operator SwEdition continuous_delivery Version >= 8.1.0 <= 11.6.0
Ibm ≫ App Connect Operator SwEdition lts Version >= 12.0.0 <= 12.10.0
Ibm ≫ App Connect Operator SwEdition continuous_delivery Version >= 12.1.0 <= 12.10.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.13% 0.027
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
IBM 5.1 1.4 3.6
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-521 Weak Password Requirements

The product does not require that users should have strong passwords.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
09.08.2025 11:36
https://www.ibm.com/support/pages/node/7233054
Vendor Advisory