CVEvulnerability

CVE-2025-36133

5.5 MEDIUM Published 2025-09-01 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-09-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.9 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-532

Description

IBM App Connect Enterprise Certified Container CD: 9.2.0 through 11.6.0, 12.1.0 through 12.14.0, and 12.0 LTS: 12.0.0 through 12.0.14stores potentially sensitive information in log files during installation that could be read by a local user on the container.

Affected configurations

• ibm app connect enterprise certified containers operands 12.0.9.0 • ibm app connect enterprise certified containers operands 12.0.10.0 • ibm app connect enterprise certified containers operands 12.0.11.1 • ibm app connect enterprise certified containers operands 12.0.11.2 • ibm app connect enterprise certified containers operands 12.0.11.3 • ibm app connect enterprise certified containers operands 12.0.12 • ibm app connect enterprise certified containers operands 12.0.12.0 • ibm app connect enterprise certified containers operands 12.0.12.2 • ibm app connect enterprise certified containers operands 12.0.12.3 • ibm app connect enterprise certified containers operands 12.0.12.4 • ibm app connect enterprise certified containers operands 12.0.12.5 • ibm app connect enterprise certified containers operands 13.0.1.0 • ibm app connect enterprise certified containers operands 13.0.1.1 • ibm app connect enterprise certified containers operands 13.0.2.0 • ibm app connect enterprise certified containers operands 13.0.2.1 • ibm app connect enterprise certified containers operands 13.0.2.2 • ibm app connect enterprise certified containers operands 13.0.3.0 • ibm app connect enterprise certified containers operands 13.0.3.1 • ibm app connect enterprise certified containers operands 13.0.4.0 • ibm app connect enterprise certified containers operands 13.0.4.1 • ibm app connect operator (>= 9.2.0 <= 11.6.0) • ibm app connect operator (>= 12.0.0 < 12.15.0) • ibm app connect operator (>= 12.1.0 < 12.15.0)

Related

Weakness · CWE (1)

  • CWE-532 Insertion of Sensitive Information into Log File weakness

References