Security Bulletin: Watson AI Gateway for Cloud Pak for Data is vulnerable to an OpenSSL denial of service caused by a type confusion error (CVE-2023-0286)

Summary

Watson Gateway is an internal component, it does not expose any APIs externally. If a remote attacker gained access to the internal CP4D cluster, they could exploit this potential vulnerability to execute arbitrary code on the system or cause a denial of service.

Vulnerability Details

CVEID:CVE-2023-0286
**DESCRIPTION:**OpenSSL is vulnerable to a denial of service, caused by a type confusion error related to X.400 address processing inside an X.509 GeneralName. By passing arbitrary pointers to a memcmp call, a remote attacker could exploit this vulnerability to read memory contents or cause a denial of service.
CVSS Base score: 8.2
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/246611 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)

Affected Products and Versions

Remediation/Fixes

Watson AI Gateway is an internal dependency to Watson Services for Cloud Pak for Data. See the Service documentation at:
<https://www.ibm.com/docs/en/cloud-paks/cp-data/4.6.x&gt;

A fix for this has been put into Gateway Core v3.10.4

It will be included in the next release of the Gateway Operator: 1.0.17 in the 4.6.5 Cloud Pak for Data releases.

Workarounds and Mitigations

None