← Back

CVE-2026-8862

nvd nist
Published: Sep 3, 2026Modified: Sep 10, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: psirt@us.ibm.com (Secondary)

Description

IBM Netezza Software 11.3.0.3 through Interim Fix 002 has credentials that are hardcoded in the application source code, allowing unauthorized access to the container registry. The exposed secret enables attackers to pull private container images, potentially revealing proprietary code, configuration details, and other sensitive information.

Affected (1)

Ibm
1 product
Netezza Performance Server
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Netezza Performance Server
version < 11.3.1.3

Related CWEs

CWE-522
Insufficiently Protected Credentials
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

References (1)

Source: psirt@us.ibm.com
PatchVendor Advisory

Timeline

No history available yet.