Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2025-0799

IBM App Connect Enterprise Arbitrary File Write

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ibm

Description

IBM App Connect enterprise 12.0.1.0 through 12.0.12.10 and 13.0.1.0 through 13.0.2.1 could allow an authenticated user to write to an arbitrary file on the system during bar configuration deployment due to improper pathname limitations on restricted directories.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM IBM App Connect Enterprise

Default version status: unaffected

  • 13.0.1.0 to ≤ 13.0.2.1affected
  • 12.0.1.0 to ≤ 12.0.12.10affected

References