PT-2025-20584 · Ibm · Ibm App Connect Enterprise Certified Container

Published 2025-05-09 · Updated 2025-08-20 · CVE-2025-1993

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM App Connect Enterprise Certified Container versions 8.1 through 12.10

Description The issue concerns the use of weaker than expected cryptographic algorithms to protect the database storing flows in DesignerAuthoring instances. This could potentially allow a local user to decrypt the data.

Recommendations For IBM App Connect Enterprise Certified Container versions 8.1 through 12.10, consider updating the cryptographic algorithms used to protect the database to stronger, more secure alternatives. As a temporary workaround, restrict access to the database and the DesignerAuthoring instances to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-521

Related Identifiers

CVE-2025-1993

Affected Products

Ibm App Connect Enterprise Certified Container

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-1993 · Security Note
• https://osv.dev/vulnerability/CVE-2025-1993 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1920976635504812315 · Twitter Post
• https://t.me/cveNotify/132858 · Telegram Post
• https://ibm.com/support/pages/node/7233054 · Vendor Advisory, Patch
• https://t.me/cvedetector/24975 · Telegram Post
• https://t.me/cvetracker/23507 · Telegram Post