Multiple vulnerabilities in IBM Cloud Pak System
| Risk | Medium |
| Patch available | YES |
| Number of vulnerabilities | 8 |
| CVE-ID | CVE-2022-32148 CVE-2022-29804 CVE-2022-30632 CVE-2022-30633 CVE-2022-30629 CVE-2022-1962 CVE-2022-27664 CVE-2022-28131 |
| CWE-ID | CWE-254 CWE-22 CWE-400 CWE-330 CWE-20 |
| Exploitation vector | Network |
| Public exploit | N/A |
| Vulnerable software |
IBM Cloud Pak System Server applications / Server solutions for antivurus protection |
| Vendor | IBM Corporation |
Security Bulletin
This security bulletin contains information about 8 vulnerabilities.
1) Security features bypass
EUVDB-ID: #VU66066
Risk: Medium
CVSSv3.1: 4.6 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-32148
CWE-ID:
CWE-254 - Security Features
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to bypass certain security restrictions.
The vulnerability exists due to unexpected behavior of httputil.ReverseProxy.ServeHTTP. When the method is called with a Request.Header map containing a nil value for the X-Forwarded-For header, ReverseProxy would set the client IP as the value of the X-Forwarded-For header, contrary to its documentation.
Install update from vendor's website.
Vulnerable software versionsIBM Cloud Pak System: 2.3.3.0 - 2.3.3.5
CPE2.3- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.0:*:*:*:*:*:*:
- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.1:*:*:*:*:*:*:
- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.2:*:*:*:*:*:*:
http://www.ibm.com/support/pages/node/6966300
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Path traversal
EUVDB-ID: #VU73872
Risk: Medium
CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-29804
CWE-ID:
CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform directory traversal attacks.
The vulnerability exists due to input validation error within the filepath.Clean function on Windows, which can convert certain invalid paths to valid, absolute paths, potentially allowing a directory traversal attack. A remote attacker can pass specially crafted data to the application and perform directory traversal attacks.
MitigationInstall update from vendor's website.
Vulnerable software versionsIBM Cloud Pak System: 2.3.3.0 - 2.3.3.5
CPE2.3- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.0:*:*:*:*:*:*:
- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.1:*:*:*:*:*:*:
- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.2:*:*:*:*:*:*:
http://www.ibm.com/support/pages/node/6966300
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
3) Resource exhaustion
EUVDB-ID: #VU66067
Risk: Medium
CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-30632
CWE-ID:
CWE-400 - Resource exhaustion
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to application does not properly control consumption of internal resources when calling Glob on a path that contains a large number of path separators. A remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.
MitigationInstall update from vendor's website.
Vulnerable software versionsIBM Cloud Pak System: 2.3.3.0 - 2.3.3.5
CPE2.3- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.0:*:*:*:*:*:*:
- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.1:*:*:*:*:*:*:
- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.2:*:*:*:*:*:*:
http://www.ibm.com/support/pages/node/6966300
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
4) Resource exhaustion
EUVDB-ID: #VU66070
Risk: Medium
CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-30633
CWE-ID:
CWE-400 - Resource exhaustion
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to application does not properly control consumption of internal resources when calling Unmarshal on a XML document into a Go struct which has a nested field that uses the any field tag. A remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.
MitigationInstall update from vendor's website.
Vulnerable software versionsIBM Cloud Pak System: 2.3.3.0 - 2.3.3.5
CPE2.3- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.0:*:*:*:*:*:*:
- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.1:*:*:*:*:*:*:
- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.2:*:*:*:*:*:*:
http://www.ibm.com/support/pages/node/6966300
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
5) Use of insufficiently random values
EUVDB-ID: #VU66122
Risk: Medium
CVSSv3.1: 5.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-30629
CWE-ID:
CWE-330 - Use of Insufficiently Random Values
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker gain access to sensitive information.
The vulnerability exists in crypto/tls implementation when generating TLS tickets age. The newSessionTicketMsgTLS13.ageAdd is always set to "0" instead of a random value.
Install update from vendor's website.
Vulnerable software versionsIBM Cloud Pak System: 2.3.3.0 - 2.3.3.5
CPE2.3- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.0:*:*:*:*:*:*:
- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.1:*:*:*:*:*:*:
- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.2:*:*:*:*:*:*:
http://www.ibm.com/support/pages/node/6966300
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
6) Resource exhaustion
EUVDB-ID: #VU66065
Risk: Medium
CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-1962
CWE-ID:
CWE-400 - Resource exhaustion
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to application does not properly control consumption of internal resources in go/parser. A remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.
MitigationInstall update from vendor's website.
Vulnerable software versionsIBM Cloud Pak System: 2.3.3.0 - 2.3.3.5
CPE2.3- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.0:*:*:*:*:*:*:
- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.1:*:*:*:*:*:*:
- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.2:*:*:*:*:*:*:
http://www.ibm.com/support/pages/node/6966300
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
7) Input validation error
EUVDB-ID: #VU67396
Risk: Medium
CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-27664
CWE-ID:
CWE-20 - Improper input validation
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.
MitigationInstall update from vendor's website.
Vulnerable software versionsIBM Cloud Pak System: 2.3.3.0 - 2.3.3.5
CPE2.3- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.0:*:*:*:*:*:*:
- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.1:*:*:*:*:*:*:
- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.2:*:*:*:*:*:*:
http://www.ibm.com/support/pages/node/6966300
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
8) Resource exhaustion
EUVDB-ID: #VU66069
Risk: Medium
CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-28131
CWE-ID:
CWE-400 - Resource exhaustion
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to application does not properly control consumption of internal resources when calling Decoder.Skip when parsing a deeply nested XML document. A remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.
MitigationInstall update from vendor's website.
Vulnerable software versionsIBM Cloud Pak System: 2.3.3.0 - 2.3.3.5
CPE2.3- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.0:*:*:*:*:*:*:
- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.1:*:*:*:*:*:*:
- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.3.2:*:*:*:*:*:*:
http://www.ibm.com/support/pages/node/6966300
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
