| Title | IBM の IBM App Connect Enterprise Certified Containers Operands および IBM App Connect Operator における脆弱なパスワードの要求に関する脆弱性 |
|---|---|
| Summary | IBM の IBM App Connect Enterprise Certified Containers Operands および IBM App Connect Operator には、脆弱なパスワードの要求に関する脆弱性が存在します。 |
| Possible impacts | 情報を取得される可能性があります。 |
| Solution | ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。 |
| Publication Date | May 9, 2025, midnight |
| Registration Date | Aug. 21, 2025, 4:31 p.m. |
| Last Update | Aug. 21, 2025, 4:31 p.m. |
| CVSS3.0 : 警告 | |
| Score | 5.5 |
|---|---|
| Vector | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| IBM |
| IBM App Connect Enterprise Certified Containers Operands 12.0.11.1 |
| IBM App Connect Enterprise Certified Containers Operands 12.0.11.2 |
| IBM App Connect Enterprise Certified Containers Operands 12.0.11.3 |
| IBM App Connect Enterprise Certified Containers Operands 12.0.12 |
| IBM App Connect Enterprise Certified Containers Operands 12.0.12.0 |
| IBM App Connect Enterprise Certified Containers Operands 12.0.12.2 |
| IBM App Connect Enterprise Certified Containers Operands 12.0.12.3 |
| IBM App Connect Enterprise Certified Containers Operands 12.0.12.4 |
| IBM App Connect Enterprise Certified Containers Operands 12.0.12.5 |
| IBM App Connect Enterprise Certified Containers Operands 12.0.7.0 |
| IBM App Connect Enterprise Certified Containers Operands 13.0.1.0 |
| IBM App Connect Enterprise Certified Containers Operands 13.0.1.1 |
| IBM App Connect Enterprise Certified Containers Operands 13.0.2.0 |
| IBM App Connect Enterprise Certified Containers Operands 13.0.2.1 |
| IBM App Connect Enterprise Certified Containers Operands 13.0.2.2 |
| IBM App Connect Operator 8.1.0 から 11.6.0 |
| No | Changed Details | Date of change |
|---|---|---|
| 1 | [2025年08月21日] 掲載 | Aug. 21, 2025, 3:54 p.m. |
| Summary | IBM App Connect Enterprise Certified Container 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, 12.7, 12.8, 12.9, and 12.10 DesignerAuthoring instances store their flows in a database that is protected by weaker than expected cryptographic algorithms that could be decrypted by a local user. |
|---|---|
| Publication Date | May 10, 2025, 3:16 a.m. |
| Registration Date | May 11, 2025, 4 a.m. |
| Last Update | May 10, 2025, 3:16 a.m. |