CVE-2026-5515
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 1.8 / Impact: 3.6
Source: psirt@us.ibm.com (Secondary)
Description
IBM App Connect Enterprise 13.0.1.0 through 13.0.7.0 stores potentially sensitive information in log files that could be read by a local user.
Affected (1)
Products: Ibm: App Connect Enterprise
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| From 13.0.1.0 to 13.0.7.1 |
Related CWEs
CWE-532
Insertion of Sensitive Information into Log File
Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.
CWE-922
Insecure Storage of Sensitive Information
The product stores sensitive information without properly limiting read or write access by unauthorized actors.
References (1)
Timeline
No history available yet.