Search
Find a vulnerability
Search criteria
2 vulnerabilities found for TS4500 CLI tool by IBM
CVE-2026-16107 (GCVE-0-2026-16107)
Vulnerability from nvd – Published: 2026-07-28 19:59 – Updated: 2026-07-29 13:56
VLAI
EPSS
VEX
Title
TS4500 CLI tool addresses security vulnerability
Summary
IBM TS4500 CLI tool Versions: 0.1.31 through 1.12.0.0 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.
Severity
5.9 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-07-29 13:44 UTC
CWE
- CWE-295 - Improper Certificate Validation
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7280583 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | TS4500 CLI tool |
Affected:
Versions: 0.1.31 , ≤ 1.12.0.0
(semver)
cpe:2.3:a:ibm:ts4500_cli_tool:*:*:*:*:*:*:*:* cpe:2.3:a:ibm:ts4500_cli_tool:1.12.0.0:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-16107",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-29T13:44:34.870543Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-07-29T13:56:30.108Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:ts4500_cli_tool:*:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:ts4500_cli_tool:1.12.0.0:*:*:*:*:*:*:*"
],
"product": "TS4500 CLI tool",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "1.12.0.0",
"status": "affected",
"version": "Versions:\u00a0 0.1.31",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM TS4500 CLI tool Versions:\u0026nbsp; 0.1.31 through 1.12.0.0 does not validate or improperly validates TLS certificate validation, which could allow\u0026nbsp;an attacker to obtain sensitive information using man in the middle techniques.\u003c/p\u003e"
}
],
"value": "IBM TS4500 CLI tool Versions:\u00a0 0.1.31 through 1.12.0.0 does not validate or improperly validates TLS certificate validation, which could allow\u00a0an attacker to obtain sensitive information using man in the middle techniques."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-295",
"description": "CWE-295 Improper Certificate Validation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-28T19:59:59.220Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7280583"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eUpgrade to fix pack version 1.12.0.2 or later, available from IBM Fix Central \u003ca href=\"http://www-933.ibm.com/support/fixcentral/\" rel=\"noopener noreferrer nofollow\"\u003ehttp://www-933.ibm.com/support/fixcentral/\u003c/a\u003e. \u00a0\u003c/p\u003e\u003cp\u003eAll future releases will include the fix for this vulnerability. \u00a0\u003c/p\u003e"
}
],
"value": "Upgrade to fix pack version 1.12.0.2 or later, available from IBM Fix Central http://www-933.ibm.com/support/fixcentral/ . \u00a0\n\n\n\nAll future releases will include the fix for this vulnerability."
}
],
"title": "TS4500 CLI tool addresses security vulnerability",
"x_generator": {
"engine": "ibm-cvegen"
}
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-16107",
"datePublished": "2026-07-28T19:59:59.220Z",
"dateReserved": "2026-07-17T14:53:58.481Z",
"dateUpdated": "2026-07-29T13:56:30.108Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-16107 (GCVE-0-2026-16107)
Vulnerability from cvelistv5 – Published: 2026-07-28 19:59 – Updated: 2026-07-29 13:56
VLAI
EPSS
VEX
Title
TS4500 CLI tool addresses security vulnerability
Summary
IBM TS4500 CLI tool Versions: 0.1.31 through 1.12.0.0 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.
Severity
5.9 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-07-29 13:44 UTC
CWE
- CWE-295 - Improper Certificate Validation
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7280583 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | TS4500 CLI tool |
Affected:
Versions: 0.1.31 , ≤ 1.12.0.0
(semver)
cpe:2.3:a:ibm:ts4500_cli_tool:*:*:*:*:*:*:*:* cpe:2.3:a:ibm:ts4500_cli_tool:1.12.0.0:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-16107",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-29T13:44:34.870543Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-07-29T13:56:30.108Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:ts4500_cli_tool:*:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:ts4500_cli_tool:1.12.0.0:*:*:*:*:*:*:*"
],
"product": "TS4500 CLI tool",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "1.12.0.0",
"status": "affected",
"version": "Versions:\u00a0 0.1.31",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIBM TS4500 CLI tool Versions:\u0026nbsp; 0.1.31 through 1.12.0.0 does not validate or improperly validates TLS certificate validation, which could allow\u0026nbsp;an attacker to obtain sensitive information using man in the middle techniques.\u003c/p\u003e"
}
],
"value": "IBM TS4500 CLI tool Versions:\u00a0 0.1.31 through 1.12.0.0 does not validate or improperly validates TLS certificate validation, which could allow\u00a0an attacker to obtain sensitive information using man in the middle techniques."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-295",
"description": "CWE-295 Improper Certificate Validation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-28T19:59:59.220Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7280583"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eUpgrade to fix pack version 1.12.0.2 or later, available from IBM Fix Central \u003ca href=\"http://www-933.ibm.com/support/fixcentral/\" rel=\"noopener noreferrer nofollow\"\u003ehttp://www-933.ibm.com/support/fixcentral/\u003c/a\u003e. \u00a0\u003c/p\u003e\u003cp\u003eAll future releases will include the fix for this vulnerability. \u00a0\u003c/p\u003e"
}
],
"value": "Upgrade to fix pack version 1.12.0.2 or later, available from IBM Fix Central http://www-933.ibm.com/support/fixcentral/ . \u00a0\n\n\n\nAll future releases will include the fix for this vulnerability."
}
],
"title": "TS4500 CLI tool addresses security vulnerability",
"x_generator": {
"engine": "ibm-cvegen"
}
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2026-16107",
"datePublished": "2026-07-28T19:59:59.220Z",
"dateReserved": "2026-07-17T14:53:58.481Z",
"dateUpdated": "2026-07-29T13:56:30.108Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}