← Back

CVE-2025-36290

nvd nist
Published: Aug 28, 2026Modified: Sep 2, 2026

JSON object

Loading...
5.9
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.2 / Impact: 3.6
Source: psirt@us.ibm.com (Secondary)

Description

IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.

Affected (1)

Ibm
1 product
Integrated Analytics System
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Integrated Analytics System
From 1.0.0.0 to 1.0.32.0

Related CWEs

CWE-295
Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.

References (1)

Source: psirt@us.ibm.com
PatchVendor Advisory

Timeline

No history available yet.