Skip to content
CVE PROGRAM SOURCE RECORD3.8 Low

CVE-2026-12730

Improper Validation of Certificate with Host Mismatch in IBM Business Automation Workflow containers

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ibm

Description

IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 007, and 24.0.0 through 24.0.0 Interim Fix 009 IBM Business Automation Workflow fails to properly verify that the hostname matches the server certificate potentially allowing connections to an attacker-controlled server.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Business Automation Workflow containers and traditional

  • 26.0.0affected
  • 25.0.0 to ≤ 25.0.0 Interim Fix 005affected
  • 24.0.1 to ≤ 24.0.1 Interim Fix 007affected
  • 24.0.0 to ≤ 24.0.0 Interim Fix 009affected

References