Skip to main content

IBM App Connect Enterprise EUVDEUVD-2026-71473

| CVE-2026-17442 MEDIUM
Insertion of Sensitive Information into Log File (CWE-532)
2026-09-04 ibm GHSA-9cqm-q2hj-45r7
Information Disclosure IBM App Connect Enterprise Integration Bus For Z Os
5.5
CVSS 3.1 · NVD
Share

Severity by source

Vendor (ibm) PRIMARY
MEDIUM
qualitative
NVD
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
vuln.today AI
5.1 MEDIUM

Local access required to read trace files; AC:H because tracing must be enabled; PR:N if logs are world-readable; credentials-only impact with no integrity or availability effect.

3.1 AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
4.0 AV:L/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (ibm).

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

2
CVSS changed
Sep 09, 2026 - 14:37 NVD
5.1 (MEDIUM) 5.5 (MEDIUM)
Analysis Generated
Sep 04, 2026 - 17:15 vuln.today

DescriptionNVD

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to credentials being written to trace logs in cleartext.

AnalysisAI

Cleartext credential exposure in IBM App Connect Enterprise 12.x and 13.x and IBM Integration Bus for z/OS 10.x allows a local attacker to harvest service credentials directly from trace log files. The middleware writes authentication material in unencrypted form during trace operations, violating the principle of minimal data exposure in diagnostic output (CWE-532). …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Delivery
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Impact
technique details hidden
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires that trace logging is active in IBM App Connect Enterprise or Integration Bus for z/OS at the time of the attack - trace logging is not enabled by default in production configurations but is commonly activated during troubleshooting or performance analysis. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 5.1 score (AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) reflects a locally-constrained threat that requires specific conditions to align: the trace facility must be active and the attacker must have filesystem read access to the generated log files. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation Vendor-released patches are available per IBM advisory https://www.ibm.com/support/pages/node/7286372; administrators should upgrade IBM App Connect Enterprise and IBM Integration Bus for z/OS to the fixed versions documented therein - exact fixed build numbers should be confirmed directly from the advisory as they are not independently specified in the available data. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in App Connect Enterprise

View all
CVE-2026-15435 CRITICAL
9.8 Jul 30

Directory traversal in IBM App Connect Enterprise 13.0.1.0-13.0.7.2 and 12.0.1.0-12.0.12.27 lets a remote unauthenticate
CVE-2026-14522 CRITICAL
9.8 Jul 30

Command injection in IBM App Connect Enterprise (versions 12.0.1.0-12.0.12.27 and 13.0.1.0-13.0.7.2) lets a remote attac
CVE-2024-22317 CRITICAL
9.1 Jan 18

IBM App Connect Enterprise 11.0.0.1 through 11.0.0.24 and 12.0.1.0 through 12.0.11.0 could allow a remote attacker to ob
CVE-2026-75624 HIGH
8.8 Sep 10

Incorrect authorization in IBM App Connect Enterprise (ACE) versions 12.x and 13.x allows a remote authenticated attacke
CVE-2026-17133 HIGH
7.8 Sep 14

Local arbitrary code execution affects IBM App Connect Enterprise releases 13.0.1.0 through 13.0.8.0 and 12.0.1.0 throug
CVE-2026-17156 HIGH
7.8 Sep 14

Insecure deserialization in IBM App Connect Enterprise releases 13.0.1.0 through 13.0.8.0 and 12.0.1.0 through 12.0.12.2
CVE-2026-17416 HIGH
7.8 Sep 14

Insecure deserialization in IBM App Connect Enterprise (12.0.1.0 through 12.0.12.27 and 13.0.1.0 through 13.0.8.0) allow
CVE-2026-81832 HIGH
7.7 Sep 04

XML external entity injection in the SAP Adapter component of IBM App Connect Enterprise and IBM Integration Bus for z/O
CVE-2026-14519 HIGH
7.5 Jul 30

Arbitrary file read in IBM App Connect Enterprise (versions 13.0.1.0 through 13.0.7.2 and 12.0.1.0 through 12.0.12.27) a
CVE-2026-12947 HIGH
7.5 Jul 30

Local information disclosure in IBM App Connect Enterprise (versions 13.0.1.0-13.0.7.2 and 12.0.1.0-12.0.12.27) occurs b
CVE-2026-78543 HIGH
7.5 Sep 04

Remote denial-of-service in IBM App Connect Enterprise and IBM Integration Bus for z/OS allows unauthenticated network a
CVE-2026-17443 MEDIUM
6.5 Sep 04

XML external entity injection in IBM App Connect Enterprise (versions 12.0.1.0-12.0.12.28 and 13.0.1.0-13.0.8.1) and IBM

Same weakness CWE-532 – Insertion of Sensitive Information into Log File

View all
CVE-2023-43261 HIGH POC
7.5
CVE-2025-24984 MEDIUM
4.6
CVE-2017-8075 CRITICAL POC
9.8
CVE-2017-8074 CRITICAL POC
9.8
CVE-2026-22778 CRITICAL POC
9.8
CVE-2019-17395 CRITICAL POC
9.8
CVE-2019-17398 CRITICAL POC
9.8
CVE-2019-17394 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

EUVD-2026-71473 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy