CVE-2026-16689
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to improper logging of credentials.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 6.2
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS probability
- 0.12%
- CWE
- CWE-532
- Published
- 2026-09-04
- Last modified
- 2026-09-08
Affected products
- IBM App Connect Enterprise
- IBM App Connect Enterprise
- IBM Integration Bus for z/OS
Weakness type
Related vulnerabilities
- CVE-2026-79966 — CWE-532: Insertion of Sensitive Information into Log File
- CVE-2026-80169 — Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to...
- CVE-2025-46808 — Sensitive information is leaked into NeuVector’s manager container logs
- CVE-2026-80124 — Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to...
- CVE-2026-78631 — Improper Restriction of Sensitive Information in Okta Hyperdrive Agent Logging
- CVE-2026-78627 — Improper Credential Protection in Okta Hyperdrive Integration Installer Logging
- CVE-2026-68873 — Windows Program Compatibility Assistant Service Information Disclosure Vulnerability
- CVE-2026-86597 — Sensitive information written to logs by Snowflake drivers