Multiple vulnerabilities in Oracle Communications Diameter Intelligence Hub

1) Path traversal

EUVDB-ID: #VU52252

Risk: Low

CVSSv4.0: 1.7 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-29425

CWE-ID: CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform directory traversal attacks.

The vulnerability exists due to input validation error within the FileNameUtils.normalize method when processing directory traversal sequences, such as "//../foo", or "\..foo". A remote attacker can send a specially crafted request and verify files availability in the parent folder.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Oracle Communications Diameter Intelligence Hub: 8.0.0-8.1.0 - 8.2.0-8.2.3

CPE2.3

• cpe:2.3:a:oracle:oracle_communications_diameter_intelligence_hub:8.0.0-8.1.0:*:*:*:*:*:*:*
• cpe:2.3:a:oracle:oracle_communications_diameter_intelligence_hub:8.2.0-8.2.3:*:*:*:*:*:*:*

External links

https://www.oracle.com/security-alerts/cpuapr2022.html?952635

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Resource exhaustion

EUVDB-ID: #VU54856

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2021-36374

CWE-ID: CWE-400 - Resource exhaustion

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to application does not properly control consumption of internal resources when processing ZIP archives. A remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Oracle Communications Diameter Intelligence Hub: 8.0.0-8.1.0 - 8.2.0-8.2.3

CPE2.3

• cpe:2.3:a:oracle:oracle_communications_diameter_intelligence_hub:8.0.0-8.1.0:*:*:*:*:*:*:*
• cpe:2.3:a:oracle:oracle_communications_diameter_intelligence_hub:8.2.0-8.2.3:*:*:*:*:*:*:*

External links

https://www.oracle.com/security-alerts/cpuapr2022.html?952635

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Resource exhaustion

EUVDB-ID: #VU56019

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2021-30468

CWE-ID: CWE-400 - Resource exhaustion

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to application does not properly control consumption of internal resources in the JsonMapObjectReaderWriter. A remote attacker can trigger resource exhaustion by submitting a malformed JSON to a web service and perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Oracle Communications Diameter Intelligence Hub: 8.0.0-8.1.0 - 8.2.0-8.2.3

CPE2.3

• cpe:2.3:a:oracle:oracle_communications_diameter_intelligence_hub:8.0.0-8.1.0:*:*:*:*:*:*:*
• cpe:2.3:a:oracle:oracle_communications_diameter_intelligence_hub:8.2.0-8.2.3:*:*:*:*:*:*:*

External links

https://www.oracle.com/security-alerts/cpuapr2022.html?952635

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Resource exhaustion

EUVDB-ID: #VU60527

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2021-43859

CWE-ID: CWE-400 - Resource exhaustion

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to application does not properly control consumption of internal resources. A remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Oracle Communications Diameter Intelligence Hub: 8.0.0-8.1.0 - 8.2.0-8.2.3

CPE2.3

• cpe:2.3:a:oracle:oracle_communications_diameter_intelligence_hub:8.0.0-8.1.0:*:*:*:*:*:*:*
• cpe:2.3:a:oracle:oracle_communications_diameter_intelligence_hub:8.2.0-8.2.3:*:*:*:*:*:*:*

External links

https://www.oracle.com/security-alerts/cpuapr2022.html?952635

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Reliance on Reverse DNS Resolution for a Security-Critical Action

EUVDB-ID: #VU27956

Risk: Medium

CVSSv4.0: 1.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2020-11971

CWE-ID: CWE-350 - Reliance on Reverse DNS Resolution for a Security-Critical Action

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform spoofing attack.

The vulnerability exists due to Apache Camel JMX is vulnerable to DNS rebinding attack. A remote attacker can send specially crafted data to the application and perform spoofing attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Oracle Communications Diameter Intelligence Hub: 8.0.0-8.1.0 - 8.2.0-8.2.3

CPE2.3

• cpe:2.3:a:oracle:oracle_communications_diameter_intelligence_hub:8.0.0-8.1.0:*:*:*:*:*:*:*
• cpe:2.3:a:oracle:oracle_communications_diameter_intelligence_hub:8.2.0-8.2.3:*:*:*:*:*:*:*

External links

https://www.oracle.com/security-alerts/cpuapr2022.html?952635

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Resource exhaustion

EUVDB-ID: #VU54853

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2021-36090

CWE-ID: CWE-400 - Resource exhaustion

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to application does not properly control consumption of internal resources when processing ZIP archives. A remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Oracle Communications Diameter Intelligence Hub: 8.0.0-8.2.3

CPE2.3

• cpe:2.3:a:oracle:oracle_communications_diameter_intelligence_hub:8.0.0-8.2.3:*:*:*:*:*:*:*

External links

https://www.oracle.com/security-alerts/cpuapr2022.html?952635

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU53672

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-22118

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to application does not properly impose security restrictions in the WebFlux application, which leads to security restrictions bypass and privilege escalation.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Oracle Communications Diameter Intelligence Hub: 8.0.0-8.1.0 - 8.2.0-8.2.3

CPE2.3

• cpe:2.3:a:oracle:oracle_communications_diameter_intelligence_hub:8.0.0-8.1.0:*:*:*:*:*:*:*
• cpe:2.3:a:oracle:oracle_communications_diameter_intelligence_hub:8.2.0-8.2.3:*:*:*:*:*:*:*

External links

https://www.oracle.com/security-alerts/cpuapr2022.html?952635

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) Improper input validation

EUVDB-ID: #VU55044

Risk: High

CVSSv4.0: 4.8 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2021-2351

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

The vulnerability exists due to improper input validation within the Advanced Networking Option in Oracle Database Server. A remote non-authenticated attacker can exploit this vulnerability to execute arbitrary code.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Oracle Communications Diameter Intelligence Hub: 8.0.0-8.2.3

CPE2.3

• cpe:2.3:a:oracle:oracle_communications_diameter_intelligence_hub:8.0.0-8.2.3:*:*:*:*:*:*:*

External links

https://www.oracle.com/security-alerts/cpuapr2022.html?952635

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

9) Code Injection

EUVDB-ID: #VU48815

Risk: High

CVSSv4.0: 9.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/U:Amber]

CVE-ID: CVE-2020-17530

CWE-ID: CWE-94 - Improper Control of Generation of Code ('Code Injection')

Exploit availability: Yes

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to improper input validation when processing certain tag's attributes. The application performs double evaluation of the code if a developer applied forced OGNL evaluation by using the %{...} syntax. A remote attacker can send a specially crafted request to the application and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Oracle Communications Diameter Intelligence Hub: 8.0.0-8.1.0 - 8.2.0-8.2.3

CPE2.3

• cpe:2.3:a:oracle:oracle_communications_diameter_intelligence_hub:8.0.0-8.1.0:*:*:*:*:*:*:*
• cpe:2.3:a:oracle:oracle_communications_diameter_intelligence_hub:8.2.0-8.2.3:*:*:*:*:*:*:*

External links

https://www.oracle.com/security-alerts/cpuapr2022.html?952635

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

Yes. This vulnerability is being exploited in the wild.