CVE-2025-13490 IBM App Connect Enterprise Certified Container IntegrationServer and IntegrationRuntime operands that report metrics are vulnerable to loss of confidentiality

[
  {
    "cpes": [
      "cpe:2.3:a:ibm:app_connect_operator:cd:11.3.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:app_connect_operator:11.6.0:*:*:*:*:*:*:*"
    ],
    "product": "App Connect Operator",
    "vendor": "IBM",
    "versions": [
      {
        "lessThanOrEqual": "11.6.0, 12.1.0 - 12.20.112.0 LTS:12.0.0 - 12.0.20",
        "status": "affected",
        "version": "CD:11.3.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "cpes": [
      "cpe:2.3:a:ibm:app_connect_enterprisecertified_containers_operands:cd:12.0.11.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:app_connect_enterprisecertified_containers_operands:r1:*:*:*:*:*:*:*"
    ],
    "product": "App Connect EnterpriseCertified Containers Operands",
    "vendor": "IBM",
    "versions": [
      {
        "lessThanOrEqual": "r1 - 12.0.12.5-r1, 13.0.1.0-r1 - 13.0.6.1-r112.0 LTS:12.0.12-r1 - 12.0.12-r20",
        "status": "affected",
        "version": "CD:12.0.11.2",
        "versionType": "semver"
      }
    ]
  }
]