CVE-2026-16689

Published: Sep 4, 2026Modified: Sep 8, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to improper logging of credentials.

Affected (3)

Products: Ibm: App Connect Enterprise, Integration Bus For Z/os

Ibm

2 products

App Connect Enterprise

Integration Bus For Z/os

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Ibm App Connect Enterprise	From 12.0.1.0 to 12.0.12.29
Ibm App Connect Enterprise	From 13.0.1.0 to 13.0.8.2
Ibm Integration Bus For Z/os	From 10.1.0.0 to 10.1.0.7

Related CWEs

CWE-532

Insertion of Sensitive Information into Log File

Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.

References (1)

https://www.ibm.com/support/pages/node/7286372

Source: psirt@us.ibm.com

PatchVendor Advisory

Timeline

No history available yet.