Skip to main navigation Skip to main content Skip to page footer

ibaDatCoordinator Logs Password in Cleartext

Security Advisories IBA-2025-03

Fond vert avec design d’interface numérique circulaire.
Publishing Date 2025-10-06
Last Update 2025-10-06
Tracking IDIBA-2025-03
CVSS Base Score6.8
CVSS Vector CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

Summary

The problem occurs when password encryption fails. In such cases, the password is logged in plain text in the application logs. This issue only arises when the iba software cannot access the DLL used for encryption.

Affected products

This issue affects ibaDatCoordinator versions 3.1.4 through 4.0.2.

How do I know that I’m affected?

You are affected if you have ibaDatCoordinator version 3.1.4 to 4.0.2 installed.

Solution

Update to the latest version: ibaDatCoordinator version 4.0.3.

Customer Actions

Please install the update to ibaDatCoordinator version 4.0.3.

Timeline

2025-09-29Noted by the Security Team
2025-10-09Fix for the Problem in Version ibaDatCoordinator 4.0.3
Retour à la liste

Qu'aimeriez-vous faire aujourd'hui ?

En choisissant un pays, ma demande sera transmise à la branche nationale d'iba AG responsable des ventes et de l'assistance.Politique de confidentialité