PT-2025-35476 · Ibm · Ibm App Connect Enterprise Certified Container

Published 2025-09-01 · Updated 2025-09-01 · CVE-2025-36133

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM App Connect Enterprise Certified Container CD versions 9.2.0 through 11.6.0 IBM App Connect Enterprise Certified Container CD versions 12.1.0 through 12.14.0 IBM App Connect Enterprise Certified Container CD 12.0 LTS versions 12.0.0 through 12.0.14

Description The software stores potentially sensitive information in log files during installation. This information could be read by a local user on the container.

Recommendations Ensure appropriate access controls are in place to restrict access to log files for IBM App Connect Enterprise Certified Container CD versions 9.2.0 through 11.6.0. Ensure appropriate access controls are in place to restrict access to log files for IBM App Connect Enterprise Certified Container CD versions 12.1.0 through 12.14.0. Ensure appropriate access controls are in place to restrict access to log files for IBM App Connect Enterprise Certified Container CD 12.0 LTS versions 12.0.0 through 12.0.14.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2025-36133

Affected Products

Ibm App Connect Enterprise Certified Container

References · 5

• https://osv.dev/vulnerability/CVE-2025-36133 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-36133 · Security Note
• https://ibm.com/support/pages/node/7243690 · Patch, Vendor Advisory
• https://t.me/CVEtracker/31425 · Telegram Post
• https://twitter.com/CVEnew/status/1962493224511045847 · Twitter Post