EUVD-2026-53437
GHSA-6486-8hjq-q8vf
Severity by source
AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
Administrator credentials required to configure integrations exploiting the hostname mismatch; limited data exposure (C:L/I:L) with no availability impact and unchanged scope.
Primary rating from Vendor (ibm).
CVSS VectorVendor: ibm
Lifecycle Timeline
1DescriptionCVE.org
IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 007, and 24.0.0 through 24.0.0 Interim Fix 009 IBM Business Automation Workflow fails to properly verify that the hostname matches the server certificate potentially allowing connections to an attacker-controlled server.
AnalysisAI
Improper TLS hostname verification in IBM Business Automation Workflow exposes high-privilege sessions to man-in-the-middle interception by failing to validate that server certificates match the target hostname. Affected deployments span both containerized (Kubernetes/OpenShift) and traditional on-premises models across multiple release trains from 24.0.0 through 26.0.0. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to hold high-privilege (administrator-level) credentials on IBM Business Automation Workflow, as confirmed by PR:H in the CVSS:3.1 vector. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 base score of 3.8 (Low) accurately reflects the constrained threat model: the vector AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N requires high-privilege credentials (PR:H), meaning the attacker must already have compromised administrator-level access before this flaw can be leveraged. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the vendor-supplied patch documented in the IBM Security Bulletin at https://www.ibm.com/support/pages/node/7282596. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today