PT-2022-15964 · Softing · Softing Secure Integration Server

Pedro Ribeiro + 1 · Published 2022-08-17 · Updated 2022-08-23 · CVE-2022-2338

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Softing Secure Integration Server version V1.22

Description The issue allows for authentication bypass via a machine-in-the-middle attack. The administration interface is accessible via plaintext HTTP protocol by default, which facilitates the attack. An HTTP request may contain a session cookie that can be captured and used for authenticating to the server.

Recommendations For Softing Secure Integration Server version V1.22, consider disabling the administration interface's accessibility via plaintext HTTP protocol as a temporary workaround until a patch is available. Restrict access to the administration interface to minimize the risk of exploitation. Avoid using the session cookie in HTTP requests until the issue is resolved.

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2022-2338

ZDI-22-1155

Affected Products

Softing Secure Integration Server

References · 6

• https://osv.dev/vulnerability/CVE-2022-2338 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-2338 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-22-1155 · Security Note
• https://industrial.softing.com/fileadmin/psirt/downloads/syt-2022-5.html · Vendor Advisory
• https://t.me/cibsecurity/48318 · Telegram Post
• https://cisa.gov/uscert/ics/advisories/icsa-22-228-04 · Note