17 matches found
CVE-2025-36290 IBM Integrated Analytics System (IIAS) is affected by improper SSL/TLS certificate validation vulnerability in JWT service component
IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques...
CVE-2025-36290
IBM Integrated Analytics System (IIAS) versions 1.0.0.0 through 1.0.31.0 contain a vulnerability in the JWT service component (apjwtservice.py module), where SSL/TLS server certificate validation is not enabled on an SSL/TLS connection. This allows a remote attacker to perform man-in-the-middle a...
CVE-2025-36271 IBM Integrated Analytics System (IIAS) is affected by a predictable salt vulnerability in Magneto component
IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...
CVE-2025-36271 IBM Integrated Analytics System (IIAS) is affected by a predictable salt vulnerability in Magneto component
IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...
CVE-2025-36271
IBM Integrated Analytics System (IIAS) versions 1.0.0.0 through 1.0.31.0 are affected by a predictable salt vulnerability in the Magneto component (specifically the resmgr.py module). The use of a predictable salt in cryptographic operations (classified as CWE-759 ) weakens hashing and encryption...
Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by a weak cryptographic algorithm vulnerability due to Paramiko
Summary Paramiko is used by IBM Integrated Analytics System as a Python library providing SSH protocol implementation for secure connections. CVE-2026-44405 affects Paramiko through version 4.0.0, where the rsakey.py module allows the use of the SHA-1 algorithm, which is considered...
Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by an improper Unicode handling vulnerability due to Python setuptools
Summary Python setuptools is used by IBM Integrated Analytics System as a package management library for downloading, building, installing, and managing Python packages. CVE-2026-59890 affects setuptools versions prior to 83.0.0, where the FileList class applies MANIFEST.in exclusion directives b...
Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by multiple path traversal vulnerabilities due to pip
Summary pip is used by IBM Integrated Analytics System as the standard Python package installer. Multiple vulnerabilities affect pip. CVE-2026-8643 involves improper sanitization of resolved absolute paths for consolescripts and guiscripts entry points, where pip treats them as paths instead of...
Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by a Regular Expression Denial of Service vulnerability due to Python idna library
Summary The idna library is used by IBM Integrated Analytics System as a Python library for Internationalized Domain Names in Applications IDNA encoding and decoding. CVE-2026-45409 affects idna versions prior to the fix, where the idna.encode function is vulnerable to Regular Expression Denial o...
Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by multiple uncontrolled resource consumption vulnerabilities due to pyasn1
Summary pyasn1 is used by IBM Integrated Analytics System as a generic ASN.1 library for Python, providing encoding and decoding of ASN.1 data structures. Multiple vulnerabilities affect pyasn1 versions prior to 0.6.4. CVE-2026-59884 involves the BER decoder accumulating long-form tag continuatio...
Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by an insecure temporary file vulnerability due to Python Requests library
Summary The Requests library is used by IBM Integrated Analytics System as an HTTP library for Python applications. CVE-2026-25645 affects the requests.utils.extractzippedpaths utility function in Requests versions prior to 2.33.0, which uses a predictable filename when extracting files from zip...
Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by multiple vulnerabilities due to urllib3
Summary urllib3 is used by IBM Integrated Analytics System as an HTTP client library for Python applications. Multiple vulnerabilities affect urllib3. CVE-2026-44431 involves improper forwarding of sensitive headers during cross-origin redirects when using the low-level ProxyManager API, which...
Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by multiple vulnerabilities due to OpenSSH
Summary OpenSSH is used by IBM Integrated Analytics System as a suite of secure networking utilities for encrypted communications. Multiple vulnerabilities affect OpenSSH versions prior to 10.3. CVE-2026-35385 involves improper preservation of file permissions where a file downloaded via scp usin...
Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by multiple vulnerabilities due to Eclipse Jetty
Summary Eclipse Jetty is used by IBM Integrated Analytics System as a lightweight Java-based web server and Servlet engine. Multiple vulnerabilities affect Eclipse Jetty across its HTTP handling, URI parsing, and authentication modules. CVE-2024-6763 involves insufficient validation of the URI...
Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by a predictable salt vulnerability in Magneto component
Summary IBM Integrated Analytics System includes Magneto as an internal resource manager component. CVE-2025-36271 affects the resmgr.py module in Magneto, where a predictable salt value is used in cryptographic operations. The use of a predictable salt weakens the effectiveness of hashing and...
Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by multiple vulnerabilities due to Eclipse Jetty
Summary Eclipse Jetty is used by IBM Integrated Analytics System as a web server and servlet container. Multiple vulnerabilities affect Jetty version 9.4.45.v20220203. CVE-2024-8184 and CVE-2023-26049 affect this version of Jetty and could allow attackers to gain access to sensitive information,...
Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by a vulnerability due to Apache Commons HttpClient
Summary Apache Commons HttpClient is used by IBM Integrated Analytics System as an HTTP client library. CVE-2012-6153 affects Apache HttpComponents due to an incomplete fix related to SSL certificate hostname verification. The library fails to verify that the server hostname matches the domain na...