IBM App Connect Enterprise Privileged User JMS Credentials Disclosure Vulnerability

A vulnerability exists in IBM App Connect Enterprise versions 12.0.1.0 through 12.0.7.0 and 13.0.1.0, which under certain configurations, could allow a privileged user to obtain Java Message Service (JMS) credentials. This issue is related to improper management of sensitive trace data.

Impact

Exploitation of this vulnerability could lead to unauthorized access to JMS credentials, potentially allowing for further privileged actions or access within the application.

Remediation

Users are advised to upgrade to IBM App Connect Enterprise version 12.0.12.8 or 13.0.1.1, depending on their current version. The APAR IT46982 is available for both versions.