{"id":"CVE-2026-1030","state":"PUBLISHED","title":"Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent","description":"IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 generates an error message that includes sensitive information about its environment, users, or associated data.","publishedAt":"2026-09-18T15:51:21.187Z","updatedAt":"2026-09-19T14:21:50.155Z","severity":{"score":4.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","source":"ibm"},"assigner":"ibm","products":["IBM Common Licensing"],"affected":[{"vendor":"IBM","product":"Common Licensing","versions":[{"version":"Agent 9.0","status":"affected"},{"version":"Agent 9.0.0.1","status":"affected"},{"version":"Agent 9.0.0.2","status":"affected"},{"version":"ART 9.0","status":"affected"},{"version":"ART 9.0.0.1","status":"affected"},{"version":"ART 9.0.0.2","status":"affected"}],"cpes":["cpe:2.3:a:ibm:common_licensing:agent:*:*:*:*:*:*:*","cpe:2.3:a:ibm:common_licensing:art:*:*:*:*:*:*:*"]}],"references":["https://www.ibm.com/support/pages/node/7286490"],"weaknesses":["CWE-209"],"ingestedAt":"2026-10-29T20:11:10.572Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/1xxx/CVE-2026-1030.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-1030","state":"PUBLISHED","datePublished":"2026-09-18T15:51:21.187Z","dateUpdated":"2026-09-19T14:21:50.155Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2026-01-16T02:38:53.902Z"},"containers":{"cna":{"title":"Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent","descriptions":[{"lang":"en","value":"IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 generates an error message that includes sensitive information about its environment, users, or associated data."}],"affected":[{"vendor":"IBM","product":"Common Licensing","versions":[{"version":"Agent 9.0","status":"affected"},{"version":"Agent 9.0.0.1","status":"affected"},{"version":"Agent 9.0.0.2","status":"affected"},{"version":"ART 9.0","status":"affected"},{"version":"ART 9.0.0.1","status":"affected"},{"version":"ART 9.0.0.2","status":"affected"}],"cpes":["cpe:2.3:a:ibm:common_licensing:agent:*:*:*:*:*:*:*","cpe:2.3:a:ibm:common_licensing:art:*:*:*:*:*:*:*"]}],"references":[{"url":"https://www.ibm.com/support/pages/node/7286490","tags":["vendor-advisory","patch"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE","baseSeverity":"MEDIUM","baseScore":4.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-209","lang":"en","description":"CWE-209 Generation of Error Message Containing Sensitive Information","type":"CWE"}]}],"providerMetadata":{"shortName":"ibm","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateUpdated":"2026-09-18T15:51:21.187Z"},"solutions":[{"lang":"en","value":"Download and install IBM Common Licensing 9.1 from  Passport Advantage https://www.ibm.com/software/passportadvantage/pao-customer \n\n\n\nUsers are strongly advised to update to the latest version (IBM Common Licensing 9.1) to mitigate any potential risks associated with these vulnerabilities.","supportingMedia":[{"type":"text/html","base64":false,"value":"<p>Download and install IBM Common Licensing 9.1 from <a href=\"https://www.ibm.com/software/passportadvantage/pao-customer\" rel=\"nofollow\">Passport Advantage</a></p><p>Users are strongly advised to update to the latest version (IBM Common Licensing 9.1) to mitigate any potential risks associated with these vulnerabilities.</p>"}]}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-1030","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-19T13:44:54.871026Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-09-19T14:21:50.155Z"}}]}}}