CVE-2026-9036

Published: Sep 3, 2026Modified: Sep 3, 2026

5.9

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.2 / Impact: 3.6

Source: psirt@us.ibm.com

Description

IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.

Related CWEs

CWE-295

Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

References (1)

https://www.ibm.com/support/pages/node/7284359

Source: psirt@us.ibm.com

Timeline

No history available yet.