6.5
Moyenne
CVE-2026-9745 IBM Netezza Software 11.3.0.3 through Interim Fix 002 has operations that are performed without validating bucket…
Description
IBM Netezza Software 11.3.0.3 through Interim Fix 002 has operations that are performed without validating bucket ownership using the ExpectedBucketOwner parameter. This omission may allow a remote attacker to exploit misconfigurations or naming collisions to redirect application requests to an unintended S3 bucket under their control.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Netezza Software 11.3 | 11.3.0.3 → dernières | Pas de correctif indiqué |
Autres CVE de Netezza Software
Les 5 CVE de Netezza Software →
CVE-2026-9744
IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate…
5.3
Moyenne
CVE-2026-8862
IBM Netezza Software 11.3.0.3 through Interim Fix 002 has credentials that are hardcoded in the application source code,…
7.5
Élevée
CVE-2026-9736
IBM Netezza Software 11.3.0.3 through Interim Fix 002 could allow an unauthorized user to inject data into log…
5.3
Moyenne
CVE-2026-9036
IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate…
5.9
Moyenne