Lucene search

K
ibmIBM1E8EB664DDC627C3309FB200921E9D61D835AF04A5F675805F93C64918337FD4
HistoryJan 13, 2022 - 3:19 p.m.

Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities

2022-01-1315:19:45
www.ibm.com
40

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.594 Medium

EPSS

Percentile

97.5%

Summary

IBM Data Risk Manager has addressed the following vulnerabilities:

Vulnerability Details

CVEID:CVE-2021-22096
**DESCRIPTION:**VMware Spring Framework could allow a remote attacker to bypass security restrictions. By sending a specially-crafted input, an attacker could exploit this vulnerability to cause the insertion of additional log entries.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/212430 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)

CVEID:CVE-2021-41184
**DESCRIPTION:**jQuery jQuery-UI is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the .position() function. A remote attacker could exploit this vulnerability using the of parameter to inject malicious script into a Web page which would be executed in a victim’s Web browser within the security context of the hosting Web site, once the page is viewed. An attacker could use this vulnerability to steal the victim’s cookie-based authentication credentials.
CVSS Base score: 7.2
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/212277 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N)

CVEID:CVE-2021-41183
**DESCRIPTION:**jQuery jQuery-UI is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the Datepicker widget. A remote attacker could exploit this vulnerability using the Text parameter to inject malicious script into a Web page which would be executed in a victim’s Web browser within the security context of the hosting Web site, once the page is viewed. An attacker could use this vulnerability to steal the victim’s cookie-based authentication credentials.
CVSS Base score: 7.2
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/212276 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N)

CVEID:CVE-2021-41182
**DESCRIPTION:**jQuery jQuery-UI is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the Datepicker widget. A remote attacker could exploit this vulnerability using the altField parameter to inject malicious script into a Web page which would be executed in a victim’s Web browser within the security context of the hosting Web site, once the page is viewed. An attacker could use this vulnerability to steal the victim’s cookie-based authentication credentials.
CVSS Base score: 7.2
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/212274 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N)

CVEID:CVE-2021-22044
**DESCRIPTION:**VMware Spring Cloud OpenFeign could allow a remote attacker to obtain sensitive information, caused by a flaw when using type-level @RequestMappingannotations over Feign client interfaces. A remote attacker could exploit this vulnerability to obtain sensitive information.
CVSS Base score: 7.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/212432 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)

CVEID:CVE-2021-22053
**DESCRIPTION:**VMware Tanzu Spring Cloud Netflix could allow a remote authenticated attacker to execute arbitrary code on the system, caused by a flaw when using both “spring-cloud-netflix-hystrix-dashboard” and “spring-boot-starter-thymeleaf”. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system.
CVSS Base score: 7.6
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/214105 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L)

CVEID:CVE-2021-22543
**DESCRIPTION:**Linux Kernel could allow a local authenticated attacker to gain elevated privileges on the system, caused by improper handling of VM_IO|VM_PFNMAP vmas in KVM. By sending a specially-crafted request, an authenticated attacker could exploit this vulnerability to gain elevated privileges to start and control a VM to read/write random pages of memory.
CVSS Base score: 7.1
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/202561 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)

CVEID:CVE-2021-23214
**DESCRIPTION:**PostgreSQL is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements when the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, which could allow the attacker to view, add, modify or delete information in the back-end database.
CVSS Base score: 8.1
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/213379 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)

CVEID:CVE-2020-36385
**DESCRIPTION:**Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a use-after-free flaw in drivers/infiniband/core/ucma.c. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.
CVSS Base score: 8.4
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/203845 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

CVEID:CVE-2021-43466
**DESCRIPTION:**thymeleaf-spring could allow a remote attacker to execute arbitrary code on the system, caused by a template injection. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system.
CVSS Base score: 9.8
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/213417 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

CVEID:CVE-2021-22097
**DESCRIPTION:**VMware Tanzu Spring AMQP is vulnerable to a denial of service, caused by an unsafe deserialization in the toString() method. By sending a specially-crafted Message object, a remote attacker could exploit this vulnerability to cause 100% CPU usage in the application.
CVSS Base score: 7.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/214242 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

CVEID:CVE-2021-22047
**DESCRIPTION:**VMware Spring Data REST could allow a remote attacker to bypass security restrictions, caused by improper implementation in HTTP resources. By sending a specially-crafted request, an attacker could exploit this vulnerability to bypass access restrictions.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/212431 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)

CVEID:CVE-2021-42340
**DESCRIPTION:**Apache Tomcat is vulnerable to a denial of service, caused by a memory leak flaw in WebSocket connections. By sending a specially-crafted request using OutOfMemoryError, a remote attacker could exploit this vulnerability to cause a denial of service condition.
CVSS Base score: 7.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/211354 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

CVEID:CVE-2021-35560
**DESCRIPTION:**An unspecified vulnerability in Java SE related to the Deployment component could allow an unauthenticated attacker to take control of the system.
CVSS Base score: 7.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/211636 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)

CVEID:CVE-2021-35586
**DESCRIPTION:**An unspecified vulnerability in Java SE related to the ImageIO component could allow an unauthenticated attacker to cause a denial of service resulting in a low availability impact using unknown attack vectors.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/211661 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

CVEID:CVE-2021-35578
**DESCRIPTION:**An unspecified vulnerability in Java SE related to the JSSE component could allow an unauthenticated attacker to cause a denial of service resulting in a low availability impact using unknown attack vectors.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/211654 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

CVEID:CVE-2021-35564
**DESCRIPTION:**An unspecified vulnerability in Java SE related to the Keytool component could allow an unauthenticated attacker to cause no confidentiality impact, low integrity impact, and no availability impact.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/211640 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)

CVEID:CVE-2021-35559
**DESCRIPTION:**An unspecified vulnerability in Java SE related to the Swing component could allow an unauthenticated attacker to cause a denial of service resulting in a low availability impact using unknown attack vectors.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/211635 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

CVEID:CVE-2021-35556
**DESCRIPTION:**An unspecified vulnerability in Java SE related to the Swing component could allow an unauthenticated attacker to cause a denial of service resulting in a low availability impact using unknown attack vectors.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/211632 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

CVEID:CVE-2021-35565
**DESCRIPTION:**An unspecified vulnerability in Java SE related to the JSSE component could allow an unauthenticated attacker to cause a denial of service resulting in a low availability impact using unknown attack vectors.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/211641 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

CVEID:CVE-2021-35588
**DESCRIPTION:**An unspecified vulnerability in Java SE related to the VM component could allow an unauthenticated attacker to cause a denial of service resulting in a low availability impact using unknown attack vectors.
CVSS Base score: 3.1
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/211662 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L)

CVEID:CVE-2021-41035
**DESCRIPTION:**Eclipse Openj9 could provide weaker than expected security, caused by the failure to throw IllegalAccessError for MethodHandles that invoke inaccessible interface methods. An attacker could exploit this vulnerability to launch further attacks on the system.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/212010 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)

CVEID:CVE-2021-37576
**DESCRIPTION:**Linux Kernel for PowerPC could allow a local authenticated attacker to execute arbitrary code on the system, caused by a memory corruption flaw in the handling of the H_RTAS hypercall. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.
CVSS Base score: 7.8
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/206372 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)

CVEID:CVE-2021-22051
**DESCRIPTION:**VMware Tanzu Spring Cloud Gateway could allow a remote authenticated attacker to bypass security restrictions, caused by an unspecified flaw. By sending specially-crafted requests, an attacker could exploit this vulnerability to make an extra request on downstream services.
CVSS Base score: 7.6
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/213030 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L)

CVEID:CVE-2021-33813
**DESCRIPTION:**JDOM is vulnerable to a denial of service, caused by an XXE issue in SAXBuilder. By sending a specially-crafted HTTP request, a remote attacker could exploit this vulnerability to cause the a denial of service.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/203804 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Affected Products and Versions

Affected Product(s) Version(s)
IBM DRM 2.0.6

Remediation/Fixes

To obtain fixes for all reported issues, customers are advised first to upgrade to v2.0.6.11, and then apply the latest FixPack 2.0.6.12.

NOTE: The FixPack is not cumulative. So it must be applied on top of 2.0.6.11 in sequence.

Product| VRMF| _APAR
_| Remediation / First Fix
—|—|—|—
IBM Data Risk Manager| 2.0.6|

|

  1. Apply DRM_2.0.6.1_Fixpack

  2. Apply DRM_2.0.6.2_Fixpack

  3. Apply DRM_2.0.6.3_FixPack

  4. Apply DRM_2.0.6.4_FixPack

  5. Apply DRM_2.0.6.5_FixPack

  6. Apply DRM_2.0.6.6_FixPack

  7. Apply DRM_2.0.6.7_FixPack

  8. Apply DRM_2.0.6.8_FixPack

  9. Apply DRM_2.0.6.9_FixPack

  10. Apply DRM_2.0.6.10_FixPack

  11. Apply DRM_2.0.6.11_FixPack

  12. Apply DRM_2.0.6.12_FixPack

IBM Data Risk Manager| 2.0.6.1|

|

  1. Apply DRM_2.0.6.2_Fixpack

  2. Apply DRM_2.0.6.3_FixPack

  3. Apply DRM_2.0.6.4_FixPack

  4. Apply DRM_2.0.6.5_FixPack

  5. Apply DRM_2.0.6.6_FixPack

  6. Apply DRM_2.0.6.7_FixPack

  7. Apply DRM_2.0.6.8_FixPack

  8. Apply DRM_2.0.6.9_FixPack

  9. Apply DRM_2.0.6.10_FixPack

  10. Apply DRM_2.0.6.11_FixPack

  11. Apply DRM_2.0.6.12_FixPack

IBM Data Risk Manager| 2.0.6.2|

|

  1. Apply DRM_2.0.6.3_FixPack

  2. Apply DRM_2.0.6.4_FixPack

  3. Apply DRM_2.0.6.5_FixPack

  4. Apply DRM_2.0.6.6_FixPack

  5. Apply DRM_2.0.6.7_FixPack

  6. Apply DRM_2.0.6.8_FixPack

  7. Apply DRM_2.0.6.9_FixPack

  8. Apply DRM_2.0.6.10_FixPack

  9. Apply DRM_2.0.6.11_FixPack

  10. Apply DRM_2.0.6.12_FixPack

IBM Data Risk Manager| 2.0.6.3|

|

  1. Apply DRM_2.0.6.4_FixPack

  2. Apply DRM_2.0.6.5_FixPack

  3. Apply DRM_2.0.6.6_FixPack

  4. Apply DRM_2.0.6.7_FixPack

  5. Apply DRM_2.0.6.8_FixPack

  6. Apply DRM_2.0.6.9_FixPack

  7. Apply DRM_2.0.6.10_FixPack

  8. Apply DRM_2.0.6.11_FixPack

  9. Apply DRM_2.0.6.12_FixPack

IBM Data Risk Manager| 2.0.6.4|

|

  1. Apply DRM_2.0.6.5_FixPack

  2. Apply DRM_2.0.6.6_FixPack

  3. Apply DRM_2.0.6.7_FixPack

  4. Apply DRM_2.0.6.8_FixPack

  5. Apply DRM_2.0.6.9_FixPack

  6. Apply DRM_2.0.6.10_FixPack

  7. Apply DRM_2.0.6.11_FixPack

  8. Apply DRM_2.0.6.12_FixPack

IBM Data Risk Manager| 2.0.6.5|

|

  1. Apply DRM_2.0.6.6_FixPack

  2. Apply DRM_2.0.6.7_FixPack

  3. Apply DRM_2.0.6.8_FixPack

  4. Apply DRM_2.0.6.9_FixPack

  5. Apply DRM_2.0.6.10_FixPack

  6. Apply DRM_2.0.6.11_FixPack

  7. Apply DRM_2.0.6.12_FixPack

IBM Data Risk Manager| 2.0.6.6|

|

  1. Apply DRM_2.0.6.7_FixPack

  2. Apply DRM_2.0.6.8_FixPack

  3. Apply DRM_2.0.6.9_FixPack

  4. Apply DRM_2.0.6.10_FixPack

  5. Apply DRM_2.0.6.11_FixPack

  6. Apply DRM_2.0.6.12_FixPack

IBM Data Risk Manager| 2.0.6.7|

|

  1. Apply DRM_2.0.6.8_FixPack

  2. Apply DRM_2.0.6.9_FixPack

  3. Apply DRM_2.0.6.10_FixPack

  4. Apply DRM_2.0.6.11_FixPack

  5. Apply DRM_2.0.6.12_FixPack

IBM Data Risk Manager| 2.0.6.8|

|

  1. Apply DRM_2.0.6.9_FixPack

  2. Apply DRM_2.0.6.10_FixPack

  3. Apply DRM_2.0.6.11_FixPack

  4. Apply DRM_2.0.6.12_FixPack

IBM Data Risk Manager| 2.0.6.9|

|

  1. Apply DRM_2.0.6.10_FixPack

  2. Apply DRM_2.0.6.11_FixPack

  3. Apply DRM_2.0.6.12_FixPack

IBM Data Risk Manager| 2.0.6.10|

|

  1. Apply DRM_2.0.6.11_FixPack

  2. Apply DRM_2.0.6.12_FixPack

IBM Data Risk Manager| 2.0.6.11|

|

  1. Apply DRM_2.0.6.12_FixPack

Workarounds and Mitigations

None

CPENameOperatorVersion
ibm data risk managereq2.0.6

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.594 Medium

EPSS

Percentile

97.5%