What is GHSA-cc37-cfqh-jjwr?

GHSA-cc37-cfqh-jjwr is a security advisory published by GitHub Security Advisories with Medium severity. IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 does not validate or improperly...

Which CVE IDs does GHSA-cc37-cfqh-jjwr cover?

GHSA-cc37-cfqh-jjwr covers the following CVE IDs: CVE-2025-36290. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-cc37-cfqh-jjwr?

GHSA-cc37-cfqh-jjwr has a CVSS v3 base score of 5.9, published by GitHub Security Advisories.

GHSA-cc37-cfqh-jjwrMediumCVSS 5.9

IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 does not validate or improperly...

Vendor

GitHub Security Advisories

Published

August 29, 2026

Last Modified

August 29, 2026

🔗 CVE IDs covered (1)

CVE-2025-36290 →

📋 Description

IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2025-36290
https://www.ibm.com/support/pages/node/7285149
https://github.com/advisories/GHSA-cc37-cfqh-jjwr