Description
IBM Netezza Software 11.3.0.3 through Interim Fix 002 has credentials that are hardcoded in the application source code, allowing unauthorized access to the container registry. The exposed secret enables attackers to pull private container images, potentially revealing proprietary code, configuration details, and other sensitive information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Netezza Software | 11.3.0.3 – ≤ Interim Fix 002 | — |
References
- https://www.ibm.com/support/pages/node/7284359 vendor-advisory patch