PT-2011-4269 · Ibm+1 · Web Application Firewall+1

Wendel Guglielmetti Henrique · Published 2011-08-15 · Updated 2018-10-09 · CVE-2011-3140

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM Web Application Firewall versions prior to update 31.030

Description The issue allows remote attackers to bypass intended intrusion prevention by dividing a dangerous parameter value into substrings. This can be demonstrated by a SQL statement that is split across multiple iid parameters and then sent to a .aspx file on an IIS web server.

Recommendations For IBM Web Application Firewall versions prior to update 31.030, update to version 31.030 or later to resolve the issue. As a temporary workaround, consider restricting access to the iid parameter in affected API endpoints until a patch is available.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2011-3140

Affected Products

Web Application Firewall

Iis

References · 8

• 🔥 http://securitytracker.com/id?1025683 · Exploit
• 🔥 https://trustwave.com/spiderlabs/advisories/TWSL2011-006.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-3140 · Security Note
• http://iss.net/security_center/reference/vuln/HTTP_Parameter_Abuse.htm · Note
• http://securityfocus.com/bid/48370 · Note
• http://securityfocus.com/archive/1/518556/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/67178 · Note
• http://securityreason.com/securityalert/8339 · Note