EUVD-2026-70746
GHSA-7vw7-rjfx-qmp5
Severity by source
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
MITM requires on-path network positioning (AC:H); confidentiality impact is High since all database traffic is readable; integrity Low for potential injection.
Primary rating from Vendor (ibm).
CVSS VectorNVD
Lifecycle Timeline
2DescriptionNVD
IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.
AnalysisAI
Improper TLS certificate validation in IBM Netezza Software 11.3.0.3 through Interim Fix 002 (CWE-297) exposes encrypted database communications to interception via man-in-the-middle attacks. A network-adjacent or on-path attacker who can position themselves between Netezza clients and the server can intercept or manipulate traffic because the software fails to properly validate TLS certificates - likely failing to check hostname binding. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | An attacker must achieve network-path positioning between a Netezza client and the Netezza server - this requires either local network access (ARP/DNS spoofing, rogue switch port), a compromised routing device, or a misconfigured cloud network where traffic traverses an attacker-controlled node. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The provided CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) contains two notable inconsistencies with the description: the attack complexity AC:L understates the realistic requirement for network positioning to execute MITM, and C:N contradicts the explicit claim that attackers can 'obtain sensitive information.' An independently assessed vector is provided below that corrects these. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the vendor-released patch as documented in IBM Security Bulletin at https://www.ibm.com/support/pages/node/7284359. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Netezza Software
View allHardcoded container registry credentials in IBM Netezza Software 11.3.0.3 through Interim Fix 002 expose a secret direct
IBM Netezza Software 11.3.0.3 through Interim Fix 002 omits the AWS S3 `ExpectedBucketOwner` validation parameter on S3
Improper TLS certificate validation in IBM Netezza Software 11.3.0.3 through Interim Fix 002 leaves encrypted connection
Log injection in IBM Netezza Software 11.3.0.3 through Interim Fix 002 allows unauthenticated remote attackers to insert
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today