Improper handling of logging causes credentials to be written to logs, allowing any local user to retrieve sensitive authentication data. This flaw is a typical information disclosure vulnerability that can be exploited to gain unauthorized insight into system credentials, potentially leading to privilege escalation if those credentials are reused or shared. The weakness is identified as CWE‑532, a legacy error in the logging mechanism.

IBM App Connect Enterprise versions 13.0.1.0 through 13.0.8.1 and 12.0.1.0 through 12.0.12.28, as well as IBM Integration Bus for z/OS version 10.1.0.0 through 10.1.0.7 are affected. The APAR IT49773 addresses the flaw, and IBM has released Fix Pack 13.0.8.2 and 12.0.12.29, with an interim fix for the z/OS product.

The CVSS score of 6.2 indicates a moderate severity, and the vulnerability requires local access to the affected systems. Although the EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, the risk remains significant because local operators or administrators could read the logs. The impact is confined to credential disclosure and may facilitate further attacks if improper permissions or credential reuse exist.