CVE-2025-1993

Name of the Vulnerable Software and Affected Versions IBM App Connect Enterprise Certified Container versions 8.1 through 12.10

Description The issue concerns the use of weaker than expected cryptographic algorithms to protect the database storing flows in DesignerAuthoring instances. This could potentially allow a local user to decrypt the data.

Recommendations For IBM App Connect Enterprise Certified Container versions 8.1 through 12.10, consider updating the cryptographic algorithms used to protect the database to stronger, more secure alternatives. As a temporary workaround, restrict access to the database and the DesignerAuthoring instances to minimize the risk of exploitation.