Description
IBM Netezza Appliance 11.3.0.2 Interim Fix 002 through 11.3.1.3 Interim Fix 006 could allow a remote authenticated attacker to change the passwords of other users due to improper authorization.
Published: 2026-11-08
Score: 6.5 Medium
EPSS: n/a
KEV: No
Impact: Unauthorized password modification leading to potential account takeover
Action: Immediate Patch
AI Analysis

Impact

An authenticated attacker can change the passwords of other users due to improper authorization. This weakness allows the attacker to take over accounts that have higher privileges or are critical to business operations, potentially compromising confidentiality and integrity of data stored or processed by the appliance. The flaw is classified as CWE‑285, indicating a failure of access control.

Affected Systems

IBM Netezza Appliance versions 11.3.0.2 through 11.3.1.3 are affected. The interim fixes listed in the CPE strings cover these versions, and the supported patch is IBM Netezza Appliance 11.3.1.5 released via Fix Central.

Risk and Exploitability

The vulnerability has a CVSS score of 6.5, classifying it as medium severity. The EPSS score is not available, so the precise likelihood of exploitation is unknown. The flaw is not currently listed in CISA KEV, implying no known public exploitation, but the need for remote authenticated access makes it a moderate to high risk if credentials are compromised or misused.

Generated by OpenCVE AI on November 8, 2026 at 19:54 UTC.

Remediation

Vendor Solution

IBM strongly recommends addressing the vulnerability now. Affected Product(s) VRMF Remediation/Fixes IBM Netezza Appliance - NPS11.3.1.5 Fix Central Link https://www.ibm.com/support/fixcentral/quickorder

OpenCVE Recommended Actions

  • Apply the IBM Netezza Appliance 11.3.1.5 fix or later by following the Fix Central instructions
  • Reset all user passwords after applying the patch to eliminate any compromised credentials
  • Enforce least‑privilege access controls and enable logging of password changes to detect future abuse

Generated by OpenCVE AI on November 8, 2026 at 19:54 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sun, 08 Nov 2026 18:00:00 +0000

Type Values Removed Values Added
Description IBM Netezza Appliance 11.3.0.2 Interim Fix 002 through 11.3.1.3 Interim Fix 006 could allow a remote authenticated attacker to change the passwords of other users due to improper authorization.
Title Vulnerability exists in IBM Netezza Appliance
First Time appeared Ibm
Ibm netezza Appliance
Weaknesses CWE-285
CPEs cpe:2.3:a:ibm:netezza_appliance:11.3.0.2:interim_fix_002:*:*:*:*:*:*
cpe:2.3:a:ibm:netezza_appliance:11.3.1.3:interim_fix_006:*:*:*:*:*:*
Vendors & Products Ibm
Ibm netezza Appliance
References
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N'}

Subscriptions

Ibm Netezza Appliance
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-11-08T17:48:29.726Z

Reserved: 2026-07-23T01:29:37.163Z

Link: CVE-2026-16699

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-11-08T18:17:03.010

Modified: 2026-11-08T18:17:03.123

Link: CVE-2026-16699

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-11-08T20:00:15Z

Weaknesses