CVE-2026-17467
Received Received - Intake

IBM Cloud Pak for Data System Weak Cryptographic Protocols Exposure

Publication date: 2026-09-14

Last updated on: 2026-09-14

Assigner: IBM Corporation

Description
IBM Cloud Pak for Data System (Yosemite 1.0) 3.0.5.2 could allow a remote attacker to obtain sensitive information due to the use of weak or deprecated cryptographic protocols.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-14
Last Modified
2026-09-14
Generated
2026-09-15
AI Q&A
2026-09-14
EPSS Evaluated
N/A
NVD
CVE-2026-17467
EUVD
EUVD-2026-77782

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
ibm cloud_pak_for_data_system 3.0.5.2
ibm cloud_pak_for_data_system to 3.0.5.3 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-327 The product uses a broken or risky cryptographic algorithm or protocol.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in IBM Cloud Pak for Data System (Yosemite 1.0) version 3.0.5.2. It allows a remote attacker to obtain sensitive information because the system uses weak or outdated cryptographic protocols.

Detection Guidance

Detecting this vulnerability requires checking for the use of weak or deprecated cryptographic protocols in IBM Cloud Pak for Data System version 3.0.5.2. Use network scanning tools like Nmap to identify services using outdated protocols (e.g., SSLv3, TLS 1.0/1.1). Inspect system configurations for enabled weak ciphers or protocols. Verify the installed version of IBM Cloud Pak for Data System to confirm if it matches the vulnerable 3.0.5.2.

Impact Analysis

An attacker could exploit this to access sensitive data, leading to potential data breaches, unauthorized access, or information theft. The high CVSS score of 8.2 indicates significant risk.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR, HIPAA, or other regulations due to unauthorized data access. Organizations may face legal penalties, fines, or reputational damage if sensitive data is compromised.

Mitigation Strategies

Immediately upgrade IBM Cloud Pak for Data System from version 3.0.5.2 to version 3.0.5.3-WS-ICPDS-NRS-fp346929 or later. This update addresses the weak cryptographic protocols. Ensure no workarounds are applied as IBM has not provided alternative mitigations. Monitor IBM's security bulletins for further updates or patches.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-17467. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart