SB2023022231 - Multiple vulnerabilities in IBM FlashSystem models 840 and 900
Published: February 22, 2023
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 3 secuirty vulnerabilities.
1) Improper input validation (CVE-ID: CVE-2016-6816)
The vulnerability allows a remote attacker to manipulate HTTP responses.
The vulnerability exists due to incorrect parsing of HTTP requests. A remote attacker can send a specially crafted HTTP request containing specially crafted characters and perform XSS attacks, manipulate HTTP responses or obtain potentially sensitive data, belonging to other sessions.
Successful exploitation of the vulnerability may allow an attacker to gain access to potentially sensitive information, but requires presence of a proxy server, which does not block injected characters.
2) Denial of service (CVE-ID: CVE-2016-6817)
The vulnerability allows a remote attacker to perform a DoS attack.
The vulnerability exists due to boundary error when parsing HTTP/2 headers. A remote attacker can send a specially crafted HTTP/2 header longer than available buffer and trigger infinite loop.
Successful exploitation of the vulnerability may result in denial of service.
3) Security restrictions bypass (CVE-ID: CVE-2016-6796)
The vulnerability allows an application to bypass security manager restrictions on the target system.The weakness improper access control. By modifying of configuration parameters for the JSP Servlet, a malicious application can bypass a configured SecurityManager.
Successful exploitation of the vulnerability results in security bypass.
Remediation
Install update from vendor's website.