Skip to main navigation Skip to main content Skip to page footer

ibaDatCoordinator Logs Password in Cleartext

Security Advisories IBA-2025-03

Зеленый фон с круговым цифровым интерфейсным дизайном.
Publishing Date 2025-10-06
Last Update 2025-10-06
Tracking IDIBA-2025-03
CVSS Base Score6.8
CVSS Vector CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

Summary

The problem occurs when password encryption fails. In such cases, the password is logged in plain text in the application logs. This issue only arises when the iba software cannot access the DLL used for encryption.

Affected products

This issue affects ibaDatCoordinator versions 3.1.4 through 4.0.2.

How do I know that I’m affected?

You are affected if you have ibaDatCoordinator version 3.1.4 to 4.0.2 installed.

Solution

Update to the latest version: ibaDatCoordinator version 4.0.3.

Customer Actions

Please install the update to ibaDatCoordinator version 4.0.3.

Timeline

2025-09-29Noted by the Security Team
2025-10-09Fix for the Problem in Version ibaDatCoordinator 4.0.3
Вернуться к списку

Что бы Вы хотели сделать сегодня?

Выбрав страну, мой запрос будет направлен в страновое отделение iba AG, отвечающее за продажи и поддержку.Политика конфиденциальности