Advisoriesby IbisIBMCVE-2025-36290
IBM Integrated Analytics System: information disclosure
No fix yet
IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Integrated Analytics System Product | >= 1.0.0.0, <= 1.0.31.0 | No fix yet |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-295