IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands Log Forging
Summary
| CVE | CVE-2026-115788 |
|---|---|
| State | PUBLISHED |
| Assigner | ibm |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-11-13 22:17:21 UTC |
| Updated | 2026-11-13 22:17:21 UTC |
| Description | IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands is vulnerable to Log Forging on a request to create a resource. |
Risk And Classification
Primary CVSS: v3.1 8.1 HIGH from [email protected]
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Problem Types: CWE-117 | CWE-117 CWE-117 Improper Output Neutralization for Logs
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.1 | [email protected] | Primary | 8.1 | HIGH | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N |
| 3.1 | CNA | CVSS | 8.1 | HIGH | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N |
CVSS v3.1 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | IBM | App Connect Operator | affected 12.1.0 12.21.0 semver | Not specified |
| CNA | IBM | App Connect Operator | affected 12.0.0 12.0.28 semver | Not specified |
| CNA | IBM | App Connect Operator | affected 13.0.0 13.6.0 semver | Not specified |
| CNA | IBM | App Connect Enterprise Certified Containers Operands | affected 12.0.11.1-r1 12.0.12.5-r1 custom | Not specified |
| CNA | IBM | App Connect Enterprise Certified Containers Operands | affected 13.0.1.0-r1 13.0.6.2-r1 custom | Not specified |
| CNA | IBM | App Connect Enterprise Certified Containers Operands | affected 12.0.12-r1 12.0.12-r28 custom | Not specified |
| CNA | IBM | App Connect Enterprise Certified Containers Operands | affected 13.0.7.0-r1 13.0.9.0-r1 custom | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| www.ibm.com/support/pages/node/7296008 | [email protected] | www.ibm.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Additional Advisory Data
Solutions
CNA: IBM strongly suggests the following: App Connect Enterprise Certified Container CD and 13 LTS (Long Term Support) Upgrade to App Connect Enterprise Certified Container Operator version 13.7.0 or higher, and ensure that all components are at 13.0.9.1-r1 or higher. Documentation on the upgrade process is available at https://www.ibm.com/docs/en/app-connect/13.0?topic=releases-upgrading-operator App Connect Enterprise Certified Container 12.0 LTS (Long Term Support) Upgrade to App Connect Enterprise Certified Container Operator version 12.0.29 or higher, and ensure that all components are at 12.0.12-r29 or higher. Documentation on the upgrade process is available at https://www.ibm.com/docs/en/app-connect/12.0?topic=umfpr-upgrading-operator-releases