PT-2025-43607 · Ibm · Ibm App Connect Enterprise

CVE-2025-36361 · Publicado 2025-10-24 · Atualizado 2025-10-28

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM App Connect Enterprise versions 12.0.1.0 through 12.0.12.17 IBM App Connect Enterprise versions 13.0.1.0 through 13.0.4.2

Description An authenticated user may be able to perform unauthorized actions on customer defined resources due to missing authorization checks.

Recommendations Update IBM App Connect Enterprise to a version later than 13.0.4.2. Update IBM App Connect Enterprise to a version later than 12.0.12.17.

Correção

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2025-36361

Produtos afetados

Ibm App Connect Enterprise

Referências · 8

• https://twitter.com/CVEnew/status/1981659549816721712 · Publicação no Twitter
• https://t.me/cveNotify/140144 · Publicação no Telegram
• https://ibm.com/support/pages/node/7249061 · Correção, Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-36361 · Nota de Segurança
• https://t.me/cveNotify/140673 · Publicação no Telegram
• https://t.me/CVEtracker/35665 · Publicação no Telegram
• https://t.me/cveNotify/140326 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-36361 · Aviso do Fabricante