Описание
IBM Netezza Software 11.3.0.3 through Interim Fix 002 has credentials that are hardcoded in the application source code, allowing unauthorized access to the container registry. The exposed secret enables attackers to pull private container images, potentially revealing proprietary code, configuration details, and other sensitive information.
Ссылки
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 11.3.1.3 (исключая)
cpe:2.3:a:ibm:netezza_performance_server:*:*:*:*:*:*:*:*
EPSS
Процентиль: 14%
0.00232
Низкий
7.5 High
CVSS3
Дефекты
CWE-522
Связанные уязвимости
CVSS3: 7.5
github
20 дней назад
IBM Netezza Software 11.3.0.3 through Interim Fix 002 has credentials that are hardcoded in the application source code, allowing unauthorized access to the container registry. The exposed secret enables attackers to pull private container images, potentially revealing proprietary code, configuration details, and other sensitive information.
EPSS
Процентиль: 14%
0.00232
Низкий
7.5 High
CVSS3
Дефекты
CWE-522