medium5.1
CVE-2025-1993
IBM App Connect Enterprise Certified Container 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.…
Impact
IBM App Connect Enterprise Certified Container 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, 12.7, 12.8, 12.9, and 12.10 DesignerAuthoring instances store their flows in a database that is protected by weaker than expected cryptographic algorithms that could be decrypted by a local user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | App Connect Enterprise Certified Containers Operands | Versions 12.0.7.0, 12.0.11.1, 12.0.11.2, 12.0.11.3, 12.0.12, 12.0.12.0 |
| Ibm | App Connect Operator | from 8.1.0 through 11.6.0 from 12.0.0 through 12.10.0 from 12.1.0 through 12.10.0 |