CVE-2025-36361 — IBM App Connect Enterprise runtime is vulnerable to a lack of authorization on windows environments using IWA

CVE-2025-36361

IBM App Connect Enterprise runtime is vulnerable to a lack of authorization on windows environments using IWA PUBLISHED

Description (CNA)

IBM App Connect Enterprise 13.0.1.0 through 13.0.4.2, and 12.0.1.0 through 12.0.12.17 could allow an authenticated user to perform unauthorized actions on customer defined resources due to missing authorization.

Affected (CNA)

Vendor / product	Versions
IBM / App Connect Enterprise	affected 13.0.1.0 through 13.0.4.2; affected 12.0.1.0 through 12.0.12.17

CWE

CWE-862

References

https://www.ibm.com/support/pages/node/7249061

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.