PT-2021-2349 · Ibm · Ibm Cloud Apm

Published 2021-02-26 · Updated 2021-03-09 · CVE-2020-4719

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions IBM Cloud APM version 8.1.4

Description The issue is related to the IBM Cloud APM server issuing a DNS request to resolve any hostname specified in the Cloud Event Management Webhook URL configuration definition. This could enable an authenticated user with admin authorization to create DNS query strings that are not hostnames, potentially allowing a remote attacker to impact the integrity of protected information.

Recommendations For IBM Cloud APM version 8.1.4, consider restricting access to the Cloud Event Management Webhook URL configuration definition to prevent authenticated users with admin authorization from creating malicious DNS query strings. As a temporary workaround, consider disabling the Webhook URL configuration definition until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-706

Related Identifiers

BDU:2021-01587

CVE-2020-4719

Affected Products

Ibm Cloud Apm

References · 8

• https://exchange.xforce.ibmcloud.com/vulnerabilities/187861 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-4719 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-4719 · Security Note
• https://ibm.com/support/pages/node/6417137 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01587 · Security Note
• https://cxsecurity.com/cveshow/CVE-2020-4719 · Note
• https://t.me/cibsecurity/24354 · Telegram Post
• https://t.me/cvenotify/10734 · Telegram Post