CVE-2025-36361

IBM App Connect Enterprise runtime is vulnerable to a lack of authorization on windows environments using IWA

CVSS 6.3 MEDIUMEPSS 0.2%CWE-862

IBM App Connect Enterprise 13.0.1.0 through 13.0.4.2, and 12.0.1.0 through 12.0.12.17 could allow an authenticated user to perform unauthorized actions on customer defined resources due to missing authorization.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Produtos afetados

IBM · App Connect Enterprise

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://www.ibm.com/support/pages/node/7249061