Multiple vulnerabilities in IBM Cloud Pak System
| Risk | Low |
| Patch available | YES |
| Number of vulnerabilities | 6 |
| CVE-ID | CVE-2022-21123 CVE-2022-21125 CVE-2022-21127 CVE-2022-21166 CVE-2022-0001 CVE-2022-0002 |
| CWE-ID | CWE-200 CWE-459 |
| Exploitation vector | Local |
| Public exploit | N/A |
| Vulnerable software |
IBM Cloud Pak System Server applications / Server solutions for antivurus protection |
| Vendor | IBM Corporation |
Security Bulletin
This security bulletin contains information about 6 vulnerabilities.
1) Information disclosure
EUVDB-ID: #VU64364
Risk: Low
CVSSv4.0: 4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2022-21123
CWE-ID:
CWE-200 - Information exposure
Exploit availability: No
DescriptionThe vulnerability allows an attacker to gain access to potentially sensitive information.
The vulnerability exists in Intel processors due to excessive data output when DirectPath I/O (PCI-Passthrough) is utilized. An attacker (both local and remote) with administrative access to a virtual machine that has an attached DirectPath I/O (PCI-Passthrough) device can obtain information stored in physical memory about the hypervisor or other virtual machines that reside on the same host.
Install update from vendor's website.
Vulnerable software versionsIBM Cloud Pak System: 2.3.0.1 - 2.3.3.5
CPE2.3- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.2.0:*:*:*:*:*:*:*
http://www.ibm.com/support/pages/node/6966326
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.
The attacker would have to login to the system and perform certain actions in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Information disclosure
EUVDB-ID: #VU64365
Risk: Low
CVSSv4.0: 4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2022-21125
CWE-ID:
CWE-200 - Information exposure
Exploit availability: No
DescriptionThe vulnerability allows an attacker to gain access to potentially sensitive information.
The vulnerability exists in Intel processors due to excessive data output when DirectPath I/O (PCI-Passthrough) is utilized. An attacker (both local and remote) with administrative access to a virtual machine that has an attached DirectPath I/O (PCI-Passthrough) device can obtain information stored in physical memory about the hypervisor or other virtual machines that reside on the same host.
Install update from vendor's website.
Vulnerable software versionsIBM Cloud Pak System: 2.3.0.1 - 2.3.3.5
CPE2.3- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.2.0:*:*:*:*:*:*:*
http://www.ibm.com/support/pages/node/6966326
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.
The attacker would have to login to the system and perform certain actions in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
3) Incomplete cleanup
EUVDB-ID: #VU64376
Risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2022-21127
CWE-ID:
CWE-459 - Incomplete cleanup
Exploit availability: No
DescriptionThe vulnerability allows a local user to gain access to sensitive information on the system.
The vulnerability exists due to incomplete cleanup in specific special register read operations. A local user can enable information disclosure.
MitigationInstall update from vendor's website.
Vulnerable software versionsIBM Cloud Pak System: 2.3.0.1 - 2.3.3.5
CPE2.3- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.2.0:*:*:*:*:*:*:*
http://www.ibm.com/support/pages/node/6966326
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.
The attacker would have to login to the system and perform certain actions in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
4) Information disclosure
EUVDB-ID: #VU64366
Risk: Low
CVSSv4.0: 4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2022-21166
CWE-ID:
CWE-200 - Information exposure
Exploit availability: No
DescriptionThe vulnerability allows an attacker to gain access to potentially sensitive information.
The vulnerability exists in Intel processors due to excessive data output when DirectPath I/O (PCI-Passthrough) is utilized. An attacker (both local and remote) with administrative access to a virtual machine that has an attached DirectPath I/O (PCI-Passthrough) device can obtain information stored in physical memory about the hypervisor or other virtual machines that reside on the same host.
MitigationInstall update from vendor's website.
Vulnerable software versionsIBM Cloud Pak System: 2.3.0.1 - 2.3.3.5
CPE2.3- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.2.0:*:*:*:*:*:*:*
http://www.ibm.com/support/pages/node/6966326
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.
The attacker would have to login to the system and perform certain actions in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
5) Information disclosure
EUVDB-ID: #VU61198
Risk: Low
CVSSv4.0: 1.9 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2022-0001
CWE-ID:
CWE-200 - Information exposure
Exploit availability: No
DescriptionThe vulnerability allows a local user to gain access to potentially sensitive information.
The vulnerability exists due to non-transparent sharing of branch predictor selectors between contexts. A local user can gain unauthorized access to sensitive information on the system.
MitigationInstall update from vendor's website.
Vulnerable software versionsIBM Cloud Pak System: 2.3.0.1 - 2.3.3.5
CPE2.3- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.2.0:*:*:*:*:*:*:*
http://www.ibm.com/support/pages/node/6966326
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.
The attacker would have to login to the system and perform certain actions in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
6) Information disclosure
EUVDB-ID: #VU61199
Risk: Low
CVSSv4.0: 1.9 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2022-0002
CWE-ID:
CWE-200 - Information exposure
Exploit availability: No
DescriptionThe vulnerability allows a local user to gain access to potentially sensitive information.
The vulnerability exists due to non-transparent sharing of branch predictor within a context. A local user can gain unauthorized access to sensitive information on the system.
MitigationInstall update from vendor's website.
Vulnerable software versionsIBM Cloud Pak System: 2.3.0.1 - 2.3.3.5
CPE2.3- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm_corporation:ibm_cloud_pak_system:2.3.2.0:*:*:*:*:*:*:*
http://www.ibm.com/support/pages/node/6966326
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.
The attacker would have to login to the system and perform certain actions in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
