CVE-2026-16107

Full vulnerability record from the local CVENow database.

Description

IBM TS4500 CLI tool Versions: 0.1.31 through 1.12.0.0 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.

Severity

MEDIUM

CVSS score

5.9 (v3.1)

Vulnerability status

Awaiting Analysis

Source identifier

[email protected]

Published

2026-07-28 20:17:23.200000

Last modified

2026-10-23 23:10:00.157000

View original CVE JSON

{
  "id": "CVE-2026-16107",
  "sourceIdentifier": "[email protected]",
  "published": "2026-07-28T20:17:23.200",
  "lastModified": "2026-10-23T23:10:00.157",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM TS4500 CLI tool Versions:  0.1.31 through 1.12.0.0 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques."
    },
    {
      "lang": "es",
      "value": "Las versiones de la herramienta CLI de IBM TS4500 0.1.31 a 1.12.0.0 no validan o validan incorrectamente la validación de certificados TLS, lo que podría permitir a un atacante obtener información sensible utilizando técnicas de man-in-the-middle."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "IBM",
          "product": "TS4500 CLI tool",
          "cpes": [
            "cpe:2.3:a:ibm:ts4500_cli_tool:*:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:ts4500_cli_tool:1.12.0.0:*:*:*:*:*:*:*"
          ],
          "versions": [
            {
              "version": "Versions:  0.1.31",
              "lessThanOrEqual": "1.12.0.0",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "baseScore": 5.9,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "HIGH",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 2.2,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-07-29T13:44:34.870543Z",
          "id": "CVE-2026-16107",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-295"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.ibm.com/support/pages/node/7280583",
      "source": "[email protected]"
    }
  ]
}