PT-2026-138999

CVE-2026-17137

·

Published

2026-11-07

·

Updated

2026-11-07

Description by

CVSS 3.1
4.0
Medium
MetricsAV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a local attacker to obtain sensitive information due to improper use of cryptography. The encryption applied to stored data is not implemented with sufficient strength, which weakens its protection.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-329: Generation of Predictable IV with CBC Mode
Related identifiers
CVE-2026-17137
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com