← Back

CVE-2026-9744

nvd nist
Published: Sep 3, 2026Modified: Sep 10, 2026

JSON object

Loading...
5.9
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.2 / Impact: 3.6
Source: NVD

Description

IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.

Affected (1)

Ibm
1 product
Netezza Performance Server
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Netezza Performance Server
version < 11.3.1.3

Related CWEs

CWE-297
Improper Validation of Certificate with Host Mismatch
The product communicates with a host that provides a certificate, but the product does not properly ensure that the certificate is actually associated with that host.

References (1)

Source: psirt@us.ibm.com
PatchVendor Advisory

Timeline

No history available yet.