PT-2016-3775 · Ibm · Cognos Application Firewall+1

Published 2016-01-02 · Updated 2016-01-08 · CVE-2015-7435

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Low

Base vector

AV:L/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM Tivoli Common Reporting (TCR) versions 2.1 through 2.1 before IF14 IBM Tivoli Common Reporting (TCR) versions 2.1.1 through 2.1.1 before IF22 IBM Tivoli Common Reporting (TCR) versions 2.1.1.2 through 2.1.1.2 before IF9 IBM Tivoli Common Reporting (TCR) versions 3.1.0.0 through 3.1.2 IBM Tivoli Common Reporting (TCR) version 3.1.2.1

Description The issue allows local users to bypass the Cognos Application Firewall (CAF) protection mechanism. This is achieved via leading whitespace in the BackURL field.

Recommendations For IBM Tivoli Common Reporting (TCR) versions 2.1 through 2.1 before IF14, apply IF14 to resolve the issue. For IBM Tivoli Common Reporting (TCR) versions 2.1.1 through 2.1.1 before IF22, apply IF22 to resolve the issue. For IBM Tivoli Common Reporting (TCR) versions 2.1.1.2 through 2.1.1.2 before IF9, apply IF9 to resolve the issue. For IBM Tivoli Common Reporting (TCR) versions 3.1.0.0 through 3.1.2, update to a version after 3.1.2 to resolve the issue. For IBM Tivoli Common Reporting (TCR) version 3.1.2.1, update to a version after 3.1.2.1 to resolve the issue. As a temporary workaround, consider restricting access to the BackURL field to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-254

Related Identifiers

CVE-2015-7435

Affected Products

Cognos Application Firewall

Ibm Tivoli Common Reporting

References · 2

• http://www-01.ibm.com/support/docview.wss?uid=swg21972799 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-7435 · Security Note