CVE-2026-17137
CVE-2026-17137CVE-2026-17137
Description
IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a local attacker to obtain sensitive information due to improper use of cryptography. The encryption applied to stored data is not implemented with sufficient strength, which weakens its protection.
Scoring
| CVSS | 4.0 () |
| Vector | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
| Last modified | 2026-11-08 |