CyberRota Analysis
AI-GeneratedIBM Netezza Software versions 11.3.0.3 through Interim Fix 002 are vulnerable due to a lack of validation for bucket ownership when using the ExpectedBucketOwner parameter. This flaw could enable remote attackers to redirect application requests to unauthorized S3 buckets, potentially leading to data exposure or manipulation. Organizations utilizing affected versions should prioritize remediation to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
IBM Netezza Software 11.3.0.3 through Interim Fix 002 has operations that are performed without validating bucket ownership using the ExpectedBucketOwner parameter. This omission may allow a remote attacker to exploit misconfigurations or naming collisions to redirect application requests to an unintended S3 bucket under their control.
Related CVEs
Other vulnerabilities affecting the same vendor(s)