CVEvulnerability

CVE-2025-1993

5.5 MEDIUM Published 2025-05-09 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-05-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.1 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-521

Description

IBM App Connect Enterprise Certified Container 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, 12.7, 12.8, 12.9, and 12.10 DesignerAuthoring instances store their flows in a database that is protected by weaker than expected cryptographic algorithms that could be decrypted by a local user.

Affected configurations

• ibm app connect enterprise certified containers operands 12.0.7.0 • ibm app connect enterprise certified containers operands 12.0.11.1 • ibm app connect enterprise certified containers operands 12.0.11.2 • ibm app connect enterprise certified containers operands 12.0.11.3 • ibm app connect enterprise certified containers operands 12.0.12 • ibm app connect enterprise certified containers operands 12.0.12.0 • ibm app connect enterprise certified containers operands 12.0.12.2 • ibm app connect enterprise certified containers operands 12.0.12.3 • ibm app connect enterprise certified containers operands 12.0.12.4 • ibm app connect enterprise certified containers operands 12.0.12.5 • ibm app connect enterprise certified containers operands 13.0.1.0 • ibm app connect enterprise certified containers operands 13.0.1.1 • ibm app connect enterprise certified containers operands 13.0.2.0 • ibm app connect enterprise certified containers operands 13.0.2.1 • ibm app connect enterprise certified containers operands 13.0.2.2 • ibm app connect operator (>= 8.1.0 <= 11.6.0) • ibm app connect operator (>= 12.0.0 <= 12.10.0) • ibm app connect operator (>= 12.1.0 <= 12.10.0)

Related

Weakness · CWE (1)

  • CWE-521 Weak Password Requirements weakness

References