CVE-2025-36290

IBM Integrated Analytics System (IIAS) versions 1.0.0.0 through 1.0.31.0 contain a vulnerability in the JWT service component (apjwtservice.py module), where SSL/TLS server certificate validation is not enabled on an SSL/TLS connection. This allows a remote attacker to perform man-in-the-middle a...

CVE-2025-36271 IBM Integrated Analytics System (IIAS) is affected by a predictable salt vulnerability in Magneto component

IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

CVE-2025-36271

IBM Integrated Analytics System (IIAS) versions 1.0.0.0 through 1.0.31.0 are affected by a predictable salt vulnerability in the Magneto component (specifically the resmgr.py module). The use of a predictable salt in cryptographic operations (classified as CWE-759 ) weakens hashing and encryption...

Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by multiple path traversal vulnerabilities due to pip

Summary pip is used by IBM Integrated Analytics System as the standard Python package installer. Multiple vulnerabilities affect pip. CVE-2026-8643 involves improper sanitization of resolved absolute paths for consolescripts and guiscripts entry points, where pip treats them as paths instead of...

Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by a Regular Expression Denial of Service vulnerability due to Python idna library

Summary The idna library is used by IBM Integrated Analytics System as a Python library for Internationalized Domain Names in Applications IDNA encoding and decoding. CVE-2026-45409 affects idna versions prior to the fix, where the idna.encode function is vulnerable to Regular Expression Denial o...

Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by multiple vulnerabilities due to OpenSSH

Summary OpenSSH is used by IBM Integrated Analytics System as a suite of secure networking utilities for encrypted communications. Multiple vulnerabilities affect OpenSSH versions prior to 10.3. CVE-2026-35385 involves improper preservation of file permissions where a file downloaded via scp usin...

Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by a predictable salt vulnerability in Magneto component

Summary IBM Integrated Analytics System includes Magneto as an internal resource manager component. CVE-2025-36271 affects the resmgr.py module in Magneto, where a predictable salt value is used in cryptographic operations. The use of a predictable salt weakens the effectiveness of hashing and...