PT-2024-11516 · Ibm · Ibm Cognos Controller

Published 2024-05-03 · Updated 2025-01-07 · CVE-2022-22364

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM Cognos Controller versions 10.4.1 through 11.0.0

Description The issue is caused by improper validation of user-supplied input, allowing a remote attacker to induce the application to perform server-side DNS lookups or HTTP requests to arbitrary domain names. By submitting suitable payloads, an attacker can cause the application server to attack other systems that it can interact with. This can be achieved through DNS rebinding via HTTP requests.

Recommendations For versions 10.4.1 through 11.0.0, upgrade the affected components to remediate the issue. As a temporary workaround, consider restricting access to external services to minimize the risk of exploitation. Assess exposure, review logs, and monitor for exploits to ensure the security of the system.

Fix

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-290

CWE-350

Related Identifiers

CVE-2022-22364

Affected Products

Ibm Cognos Controller

References · 6

• https://osv.dev/vulnerability/CVE-2022-22364 · Vendor Advisory
• https://ibm.com/support/pages/node/7149876 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22364 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/220903 · Vendor Advisory
• https://twitter.com/oktsec/status/1786524350889242710 · Twitter Post
• https://twitter.com/CVEnew/status/1786770944402260234 · Twitter Post