CVE-2025-36290
MediumCVSS 5.9Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
IBM Integrated Analytics System versions 1.0.0.0 through 1.0.31.0 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man-in-the-middle techniques.
Risk Assessment
An attacker could intercept network traffic and access confidential data, potentially leading to information leakage and privacy breach.
Recommendation
Update IBM Integrated Analytics System to a version that includes TLS validation fixes. Ensure all TLS connections are properly verified.
Other vulnerabilities in IBM Integrated Analytics System
Original NVD description (English source)
IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.