Multiple vulnerabilities in IBM Tivoli Application Dependency Discovery Manager

Published: 2024-01-29

Risk	Medium
Patch available	YES
Number of vulnerabilities	3
CVE-ID	CVE-2023-47143 CVE-2023-47144 CVE-2023-47142
CWE-ID	CWE-444 CWE-79 CWE-862
Exploitation vector	Network
Public exploit	N/A
Vulnerable software Subscribe	IBM Tivoli Application Dependency Discovery Manager Web applications / Other software
Vendor	IBM Corporation

Security Bulletin

This security bulletin contains information about 3 vulnerabilities.

1) Inconsistent interpretation of HTTP requests

EUVDB-ID: #VU85869

Risk: Medium

CVSSv3.1: 5.3 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-47143

CWE-ID: CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform HTTP request smuggling attacks.

The vulnerability exists due to improper validation of HTTP requests. A remote attacker can send a specially crafted HTTP request with a malformed Host header to the server and smuggle arbitrary HTTP headers.

Successful exploitation of vulnerability may allow an attacker to poison HTTP cache and perform phishing attacks.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

IBM Tivoli Application Dependency Discovery Manager: 7.3.0.0 - 7.3.0.10

CPE2.3

External links

http://www.ibm.com/support/pages/node/7105139

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Cross-site scripting

EUVDB-ID: #VU85870

Risk: Low

CVSSv3.1: 5.3 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-47144

CWE-ID: CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Exploit availability: No

Description

The disclosed vulnerability allows a remote attacker to perform cross-site scripting (XSS) attacks.

The vulnerability exists due to insufficient sanitization of user-supplied data. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in context of vulnerable website.

Successful exploitation of this vulnerability may allow a remote attacker to steal potentially sensitive information, change appearance of the web page, perform phishing and drive-by-download attacks.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

IBM Tivoli Application Dependency Discovery Manager: 7.3.0.0 - 7.3.0.10

CPE2.3

External links

http://www.ibm.com/support/pages/node/7105139

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Missing Authorization

EUVDB-ID: #VU85871

Risk: Medium

CVSSv3.1: 7.1 [CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-47142

CWE-ID: CWE-862 - Missing Authorization

Exploit availability: No

Description

The vulnerability allows a remote attacker to escalate privileges within the application.

The vulnerability exists due to missing authorization at certain API endpoints. A remote attacker on the local network can send a specially crafted HTTP request and escalate privileges within the application.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

IBM Tivoli Application Dependency Discovery Manager: 7.3.0.0 - 7.3.0.10

CPE2.3

External links

http://www.ibm.com/support/pages/node/7105139

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the local network (LAN).

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.