CVE-2026-9745

6.5 Moyenne

Publiée le 03/09/2026 à 23:17 · Modifiée le 10/09/2026 à 22:02 · Analysée par le NVD · Source : psirt@us.ibm.com

Description

IBM Netezza Software 11.3.0.3 through Interim Fix 002 has operations that are performed without validating bucket ownership using the ExpectedBucketOwner parameter. This omission may allow a remote attacker to exploit misconfigurations or naming collisions to redirect application requests to an unintended S3 bucket under their control.

Traduire en français

Produits concernés

IBM Netezza Software
Ibm netezza performance server

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.5 Moyenne	psirt@us.ibm.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N`

Faiblesses (CWE)

CWE-283

Références

https://www.ibm.com/support/pages/node/7284359 PatchVendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories