{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-14435", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2026-07-01T21:51:42.502Z", "datePublished": "2026-11-08T17:21:24.772Z", "dateUpdated": "2026-11-08T17:21:24.772Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-11-08T17:21:24.772Z"}, "title": "IBM Turbonomic kubeturbo agent used by IBM Turbonomic Application Resource Management is affected by a vulnerability", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-295", "description": "CWE-295 Improper Certificate Validation", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "Turbonomic kubeturbo agent", "versions": [{"status": "affected", "version": "8.16.0", "lessThanOrEqual": "8.20.3", "versionType": "semver"}], "cpes": ["cpe:2.3:a:ibm:turbonomic_kubeturbo_agent:8.16.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:turbonomic_kubeturbo_agent:8.20.3:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM Turbonomic kubeturbo agent 8.16.0 through 8.20.3 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM Turbonomic kubeturbo agent 8.16.0 through 8.20.3 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7290683", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseSeverity": "MEDIUM", "baseScore": 5.9, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"}}], "solutions": [{"lang": "en", "value": "IBM strongly recommends addressing the vulnerability now by re-installing a version of kubeturbo with the required fix.\n\nProduct(s)Version(s) number and/or range\u00a0Remediation/Fix/InstructionsIBM Turbonomic kubeturbo agent8.20.4Follow the kubeturbo installation instructions https://www.ibm.com/docs/en/tarm/8.20.4 from the IBM Turbonomic documentation", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p><strong>IBM strongly recommends addressing the vulnerability now by re-installing a version of kubeturbo with the required fix.</strong></p><div><table><tbody><tr><td><strong>Product(s)</strong></td><td><strong>Version(s) number and/or range\u00a0</strong></td><td><strong>Remediation/Fix/Instructions</strong></td></tr><tr><td>IBM Turbonomic kubeturbo agent</td><td>8.20.4</td><td>Follow the <a href=\"https://www.ibm.com/docs/en/tarm/8.20.4?topic=configuration-container-platform-targets\" rel=\"nofollow\">kubeturbo installation instructions</a> from the IBM Turbonomic documentation\u00a0</td></tr></tbody></table></div><p></p><p></p>"}]}]}}}

{}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:ibm:turbonomic_kubeturbo_agent:8.16.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:turbonomic_kubeturbo_agent:8.20.3:*:*:*:*:*:*:*"], "product": "Turbonomic kubeturbo agent", "vendor": "IBM", "versions": [{"lessThanOrEqual": "8.20.3", "status": "affected", "version": "8.16.0", "versionType": "semver"}]}], "source": "psirt@us.ibm.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM Turbonomic kubeturbo agent 8.16.0 through 8.20.3 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques."}], "id": "CVE-2026-14435", "lastModified": "2026-11-08T18:17:01.977", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 3.6, "source": "psirt@us.ibm.com", "type": "Primary"}]}, "published": "2026-11-08T18:17:01.870", "references": [{"source": "psirt@us.ibm.com", "url": "https://www.ibm.com/support/pages/node/7290683"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-295"}], "source": "psirt@us.ibm.com", "type": "Primary"}]}

{}

{"created": "2026-11-08T18:30:11.969759+00:00", "updated": "2026-11-08T18:30:11.969764+00:00", "vendors": []}