CVE-2025-36133

EPSS 0.11%
Veröffentlicht 01.09.2025 11:56:19
Zuletzt bearbeitet 18.12.2025 17:49:01
Erkennungen
Login

IBM App Connect Enterprise information disclosure

IBM App Connect Enterprise Certified Container CD: 9.2.0 through 11.6.0, 12.1.0 through 12.14.0, and 12.0 LTS: 12.0.0 through 12.0.14stores potentially sensitive information in log files during installation that could be read by a local user on the container.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 42 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.9.0 Update r2 SwEdition continuous_delivery

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.9.0 Update r3 SwEdition continuous_delivery

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.10.0 Update r1 SwEdition continuous_delivery

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.10.0 Update r2 SwEdition continuous_delivery

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.10.0 Update r3 SwEdition continuous_delivery

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.11.1 Update r1 SwEdition continuous_delivery

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.11.2 Update r1 SwEdition continuous_delivery

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.11.3 Update r1 SwEdition continuous_delivery

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12 Update r1 SwEdition lts

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12 Update r10 SwEdition lts

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12 Update r11 SwEdition lts

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12 Update r12 SwEdition lts

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12 Update r13 SwEdition lts

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12 Update r14 SwEdition lts

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12 Update r2 SwEdition lts

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12 Update r3 SwEdition lts

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12 Update r4 SwEdition lts

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12 Update r5 SwEdition lts

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12 Update r6 SwEdition lts

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12 Update r7 SwEdition lts

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12 Update r8 SwEdition lts

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12 Update r9 SwEdition lts

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12.0 Update r1 SwEdition continuous_delivery

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12.0 Update r2 SwEdition continuous_delivery

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12.2 Update r1 SwEdition continuous_delivery

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12.3 Update r1 SwEdition continuous_delivery

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12.4 Update r1 SwEdition continuous_delivery

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 12.0.12.5 Update r1 SwEdition continuous_delivery

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 13.0.1.0 Update r1 SwEdition continuous_delivery

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 13.0.1.0 Update r2 SwEdition continuous_delivery

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 13.0.1.1 Update r1 SwEdition continuous_delivery

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 13.0.2.0 Update r1 SwEdition continuous_delivery

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 13.0.2.1 Update r1 SwEdition continuous_delivery

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 13.0.2.2 Update r1 SwEdition continuous_delivery

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 13.0.2.2 Update r2 SwEdition continuous_delivery

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 13.0.3.0 Update r1 SwEdition continuous_delivery

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 13.0.3.1 Update r1 SwEdition continuous_delivery

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 13.0.4.0 Update r1 SwEdition continuous_delivery

Ibm ≫ App Connect Enterprise Certified Containers Operands Version 13.0.4.1 Update r1 SwEdition continuous_delivery

Ibm ≫ App Connect Operator SwEdition continuous_delivery Version >= 9.2.0 <= 11.6.0

Ibm ≫ App Connect Operator SwEdition lts Version >= 12.0.0 < 12.15.0

Ibm ≫ App Connect Operator SwEdition continuous_delivery Version >= 12.1.0 < 12.15.0

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.11%	0.015

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
IBM	5.9	1.4	4	CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N

CWE-532 Insertion of Sensitive Information into Log File

The product writes sensitive information to a log file.

https://www.ibm.com/support/pages/node/7243690

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2025-36133

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-36133

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-36133

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2025-36133