PT-2025-35476 · Ibm · Ibm App Connect Enterprise Certified Container
CVE-2025-36133
·
Publicado
2025-09-01
·
Atualizado
2025-09-01
CVSS v3.1
5.9
Média
| Vetor | AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
IBM App Connect Enterprise Certified Container CD versions 9.2.0 through 11.6.0
IBM App Connect Enterprise Certified Container CD versions 12.1.0 through 12.14.0
IBM App Connect Enterprise Certified Container CD 12.0 LTS versions 12.0.0 through 12.0.14
Description
The software stores potentially sensitive information in log files during installation. This information could be read by a local user on the container.
Recommendations
Ensure appropriate access controls are in place to restrict access to log files for IBM App Connect Enterprise Certified Container CD versions 9.2.0 through 11.6.0.
Ensure appropriate access controls are in place to restrict access to log files for IBM App Connect Enterprise Certified Container CD versions 12.1.0 through 12.14.0.
Ensure appropriate access controls are in place to restrict access to log files for IBM App Connect Enterprise Certified Container CD 12.0 LTS versions 12.0.0 through 12.0.14.
Correção
Insertion into Log File
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ibm App Connect Enterprise Certified Container