CVE-2026-16689

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to improper logging of credentials.

Score

CVSS 3.1 6.2 Medium

Status

Analyzed - psirt@us.ibm.com

Published

2026-09-04

Last modified

2026-09-08

Weaknesses

CWE-532

Affected products

• App Connect Enterprise (Ibm)
• Integration Bus For Z/os (Ibm)
• Integration Bus For Zos (Ibm)

References

• https://www.ibm.com/support/pages/node/7286372