3.8

CVE-2026-12730

Improper Validation of Certificate with Host Mismatch in IBM Business Automation Workflow containers

IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 007, and 24.0.0 through 24.0.0 Interim Fix 009 IBM Business Automation Workflow fails to properly verify that the hostname matches the server certificate potentially allowing connections to an attacker-controlled server.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Business Automation Workflow Version 24.0.0 Update - SwEdition containers
Ibm ≫ Business Automation Workflow Version 24.0.0 Update - SwEdition traditional
Ibm ≫ Business Automation Workflow Version 24.0.0 Update if001 SwEdition containers
Ibm ≫ Business Automation Workflow Version 24.0.0 Update if001 SwEdition traditional
Ibm ≫ Business Automation Workflow Version 24.0.0 Update if002 SwEdition containers
Ibm ≫ Business Automation Workflow Version 24.0.0 Update if002 SwEdition traditional
Ibm ≫ Business Automation Workflow Version 24.0.0 Update if003 SwEdition containers
Ibm ≫ Business Automation Workflow Version 24.0.0 Update if003 SwEdition traditional
Ibm ≫ Business Automation Workflow Version 24.0.0 Update if004 SwEdition containers
Ibm ≫ Business Automation Workflow Version 24.0.0 Update if004 SwEdition traditional
Ibm ≫ Business Automation Workflow Version 24.0.0 Update if005 SwEdition containers
Ibm ≫ Business Automation Workflow Version 24.0.0 Update if005 SwEdition traditional
Ibm ≫ Business Automation Workflow Version 24.0.0 Update if006 SwEdition containers
Ibm ≫ Business Automation Workflow Version 24.0.0 Update if006 SwEdition traditional
Ibm ≫ Business Automation Workflow Version 24.0.0 Update if007 SwEdition containers
Ibm ≫ Business Automation Workflow Version 24.0.0 Update if007 SwEdition traditional
Ibm ≫ Business Automation Workflow Version 24.0.0 Update if008 SwEdition containers
Ibm ≫ Business Automation Workflow Version 24.0.0 Update if008 SwEdition traditional
Ibm ≫ Business Automation Workflow Version 24.0.0 Update if009 SwEdition containers
Ibm ≫ Business Automation Workflow Version 24.0.0 Update if009 SwEdition traditional
Ibm ≫ Business Automation Workflow Version 24.0.1 Update - SwEdition containers
Ibm ≫ Business Automation Workflow Version 24.0.1 Update - SwEdition traditional
Ibm ≫ Business Automation Workflow Version 24.0.1 Update if001 SwEdition containers
Ibm ≫ Business Automation Workflow Version 24.0.1 Update if001 SwEdition traditional
Ibm ≫ Business Automation Workflow Version 24.0.1 Update if002 SwEdition containers
Ibm ≫ Business Automation Workflow Version 24.0.1 Update if002 SwEdition traditional
Ibm ≫ Business Automation Workflow Version 24.0.1 Update if003 SwEdition containers
Ibm ≫ Business Automation Workflow Version 24.0.1 Update if003 SwEdition traditional
Ibm ≫ Business Automation Workflow Version 24.0.1 Update if004 SwEdition containers
Ibm ≫ Business Automation Workflow Version 24.0.1 Update if004 SwEdition traditional
Ibm ≫ Business Automation Workflow Version 24.0.1 Update if005 SwEdition containers
Ibm ≫ Business Automation Workflow Version 24.0.1 Update if005 SwEdition traditional
Ibm ≫ Business Automation Workflow Version 24.0.1 Update if006 SwEdition containers
Ibm ≫ Business Automation Workflow Version 24.0.1 Update if006 SwEdition traditional
Ibm ≫ Business Automation Workflow Version 24.0.1 Update if007 SwEdition containers
Ibm ≫ Business Automation Workflow Version 24.0.1 Update if007 SwEdition traditional
Ibm ≫ Business Automation Workflow Version 25.0.0 Update - SwEdition containers
Ibm ≫ Business Automation Workflow Version 25.0.0 Update - SwEdition traditional
Ibm ≫ Business Automation Workflow Version 25.0.0 Update if001 SwEdition containers
Ibm ≫ Business Automation Workflow Version 25.0.0 Update if001 SwEdition traditional
Ibm ≫ Business Automation Workflow Version 25.0.0 Update if002 SwEdition containers
Ibm ≫ Business Automation Workflow Version 25.0.0 Update if002 SwEdition traditional
Ibm ≫ Business Automation Workflow Version 25.0.0 Update if003 SwEdition containers
Ibm ≫ Business Automation Workflow Version 25.0.0 Update if003 SwEdition traditional
Ibm ≫ Business Automation Workflow Version 25.0.0 Update if004 SwEdition containers
Ibm ≫ Business Automation Workflow Version 25.0.0 Update if004 SwEdition traditional
Ibm ≫ Business Automation Workflow Version 25.0.0 Update if005 SwEdition containers
Ibm ≫ Business Automation Workflow Version 25.0.0 Update if005 SwEdition traditional
Ibm ≫ Business Automation Workflow Version 26.0.0 Update - SwEdition containers
Ibm ≫ Business Automation Workflow Version 26.0.0 Update - SwEdition traditional
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.062
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
IBM 3.8 1.2 2.5
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
CWE-297 Improper Validation of Certificate with Host Mismatch

The product communicates with a host that provides a certificate, but the product does not properly ensure that the certificate is actually associated with that host.

https://www.ibm.com/support/pages/node/7282596
Vendor Advisory