EUVD-2026-70743
GHSA-6gmh-w7rj-prjm
Severity by source
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
MITM network positioning prerequisite justifies AC:H; TLS interception yields confidentiality loss only, making I:N and A:N appropriate.
Primary rating from Vendor (ibm).
CVSS VectorVendor: ibm
Lifecycle Timeline
1DescriptionCVE.org
IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.
AnalysisAI
Improper TLS certificate validation in IBM Netezza Software 11.3.0.3 through Interim Fix 002 leaves encrypted connections susceptible to man-in-the-middle interception, allowing an unauthenticated network adversary to obtain sensitive information in transit. The flaw is classified under CWE-295, meaning the software either skips certificate chain verification, hostname matching, or revocation checks - permitting a fraudulent certificate to be silently accepted. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to achieve a man-in-the-middle network position on the path between an affected IBM Netezza Software 11.3.0.3 (through Interim Fix 002) instance and a communicating peer, achievable via ARP spoofing, DNS poisoning, rogue wireless access points, or compromise of a network device. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor-assigned CVSS 3.1 score of 5.9 (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) is an accurate calibration: the AC:H metric correctly captures that exploitation requires the attacker to achieve and sustain a man-in-the-middle network position, which is not trivially automatable at scale. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | IBM has confirmed a patch is available for this vulnerability; the primary remediation is to apply the fix documented in IBM Support advisory at https://www.ibm.com/support/pages/node/7284359. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Netezza Software
View allHardcoded container registry credentials in IBM Netezza Software 11.3.0.3 through Interim Fix 002 expose a secret direct
IBM Netezza Software 11.3.0.3 through Interim Fix 002 omits the AWS S3 `ExpectedBucketOwner` validation parameter on S3
Improper TLS certificate validation in IBM Netezza Software 11.3.0.3 through Interim Fix 002 (CWE-297) exposes encrypted
Log injection in IBM Netezza Software 11.3.0.3 through Interim Fix 002 allows unauthenticated remote attackers to insert
Same weakness CWE-295 – Improper Certificate Validation
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today