Skip to main navigation Skip to main content Skip to page footer

ibaDatCoordinator Logs Password in Cleartext

Security Advisories IBA-2025-03

绿色背景带有圆形数字界面设计。
Publishing Date 2025-10-06
Last Update 2025-10-06
Tracking IDIBA-2025-03
CVSS Base Score6.8
CVSS Vector CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

Summary

The problem occurs when password encryption fails. In such cases, the password is logged in plain text in the application logs. This issue only arises when the iba software cannot access the DLL used for encryption.

Affected products

This issue affects ibaDatCoordinator versions 3.1.4 through 4.0.2.

How do I know that I’m affected?

You are affected if you have ibaDatCoordinator version 3.1.4 to 4.0.2 installed.

Solution

Update to the latest version: ibaDatCoordinator version 4.0.3.

Customer Actions

Please install the update to ibaDatCoordinator version 4.0.3.

Timeline

2025-09-29Noted by the Security Team
2025-10-09Fix for the Problem in Version ibaDatCoordinator 4.0.3
返回列表视图

你今天想做什么?

选择国家后,我的请求将转发给 iba AG 负责销售和支持的国家分支机构。隐私政策