CVE-2026-115788: IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands Log Forging
IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands is vulnerable to Log Forging on a request to create a resource.
Other sources
IBM App Connect operator is vulnerable to Log Forging on a request to create a resource.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM App Connect Enterprise Certified Container Operatorto a version that resolves this vulnerability.Fixed in 12.0.29 - Upgrade
Upgrade
IBM App Connect Enterprise Certified Container componentsto a version that resolves this vulnerability.Fixed in 12.0.12-r29 - Upgrade
Upgrade
IBM App Connect Enterprise Certified Container Operatorto a version that resolves this vulnerability.Fixed in 13.7.0 - Upgrade
Upgrade
IBM App Connect Enterprise Certified Container componentsto a version that resolves this vulnerability.Fixed in 13.0.9.1-r1
Event History
Frequently Asked Questions
Does exploitation require authentication or existing access?
Yes. The CVSS vector indicates low privileges are required (PR:L); it is not rated as exploitable by an unauthenticated attacker.
Which application activity should be prioritized for review?
Prioritize requests that create resources, as the vulnerability is triggered on a request to create a resource.
What security impact is indicated if the issue is exploited?
The CVSS vector indicates high confidentiality and integrity impact, with no availability impact indicated.