IBM App Connect Enterprise versions 13.0.1.0 through 13.0.7.2 and 12.0.1.0 through 12.0.12.27 contain a CWE-532 vulnerability involving the insertion of sensitive information into log files. These log files may be accessible to local users, potentially exposing sensitive data. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity due to network attack vector, low attack complexity, no privileges required, no user interaction, and high confidentiality impact. There is no vendor advisory or patch information available at this time.

Sensitive information stored in log files could be read by local users, leading to unauthorized disclosure of confidential data. The vulnerability does not affect integrity or availability but poses a significant confidentiality risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to log files to trusted users only and monitor for any unauthorized access attempts.