Advisoriesby IbisIBMCVE-2026-8862
IBM Netezza Software: information disclosure
No fix yet
IBM Netezza Software 11.3.0.3 through Interim Fix 002 has credentials that are hardcoded in the application source code, allowing unauthorized access to the container registry. The exposed secret enables attackers to pull private container images, potentially revealing proprietary code, configuration details, and other sensitive information.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Netezza Software Product | >= 11.3.0.3, <= Interim Fix 002 | No fix yet |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-522