Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
===========================================================================
AUSCERT External Security Bulletin Redistribution
ESB-2017.1393
Security Bulletin: Vulnerabilities in OpenSSL have been identified in IBM
Cognos Business Intelligence shipped with IBM Cognos Planning
1 June 2017
===========================================================================
AusCERT Security Bulletin Summary
---------------------------------
Product: IBM Cognos Business Intelligence
Publisher: IBM
Operating System: AIX
HP-UX
Linux variants
Solaris
Windows
Impact/Access: Access Privileged Data -- Remote/Unauthenticated
Modify Arbitrary Files -- Remote/Unauthenticated
Denial of Service -- Remote/Unauthenticated
Execute Arbitrary Code/Commands -- Remote/Unauthenticated
Provide Misleading Information -- Remote/Unauthenticated
Resolution: Patch/Upgrade
CVE Names: CVE-2017-3732 CVE-2017-3731 CVE-2017-3730
CVE-2017-3289 CVE-2017-3272 CVE-2017-3261
CVE-2017-3259 CVE-2017-3253 CVE-2017-3252
CVE-2017-3241 CVE-2017-3231 CVE-2017-1125
CVE-2016-9710 CVE-2016-9597 CVE-2016-7055
CVE-2016-5597 CVE-2016-5554 CVE-2016-5552
CVE-2016-5549 CVE-2016-5548 CVE-2016-5547
CVE-2016-5546 CVE-2016-2183 CVE-2016-0254
Reference: ASB-2017.0074
ASB-2017.0059
ESB-2016.2239.2
ESB-2016.2238
Original Bulletin:
http://www.ibm.com/support/docview.wss?uid=swg22004205
http://www.ibm.com/support/docview.wss?uid=swg22004036
- --------------------------BEGIN INCLUDED TEXT--------------------
Security Bulletin: Vulnerabilities in OpenSSL have been identified in IBM
Cognos Business Intelligence shipped with IBM Cognos Planning (CVE-2016-7055,
CVE-2017-3730, CVE-2017-3731, CVE-2017-3732).
Document information
More support for: Cognos Planning
Software version: 10.1.1, 10.2
Operating system(s): Windows
Reference #: 2004205
Modified date: 31 May 2017
Security Bulletin
Summary
OpenSSL vulnerabilities were disclosed on January 26, 2017 by the OpenSSL
Project. OpenSSL is used by IBM Cognos Business Intelligence which is
shipped with IBM Cognos Planning.
Vulnerability Details
Refer to the security bulletin listed in the Remediation/Fixes section
Affected Products and Versions
IBM Cognos Planning 10.1.1
IBM Cognos Planning 10.2
Remediation/Fixes
Refer to the following security bulletins for vulnerability details and
information about fixes addressed by IBM Cognos Business Intelligence
which is shipped with IBM Cognos Planning.
Principal Product and Version(s) Affected Supporting Product and Version Affected Supporting Product Security Bulletin
IBM Cognos Planning 10.1.1 IBM Cognos Business Intelligence 10.1.1 IBM Cognos Business Intelligence Server 2017Q2 Security Updater : IBM
Cognos Business Intelligence Server is affected by multiple vulnerabilities.
IBM Cognos Planning 10.2 IBM Cognos Business Intelligence 10.2.2
Workarounds and Mitigations
None
References
Complete CVSS v3 Guide
On-line Calculator v3
Related information
IBM Secure Engineering Web Portal
IBM Product Security Incident Response Blog
Change History
31 May 2017: Original Version Published
*The CVSS Environment Score is customer environment specific and will
ultimately impact the Overall CVSS Score. Customers can evaluate the impact
of this vulnerability in their environments by accessing the links in the
Reference section of this Security Bulletin.
Disclaimer
According to the Forum of Incident Response and Security Teams (FIRST), the
Common Vulnerability Scoring System (CVSS) is an "industry open standard
designed to convey vulnerability severity and help to determine urgency
and priority of response." IBM PROVIDES THE CVSS SCORES "AS IS" WITHOUT
WARRANTY OF ANY KIND, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY AND
FITNESS FOR A PARTICULAR PURPOSE. CUSTOMERS ARE RESPONSIBLE FOR ASSESSING
THE IMPACT OF ANY ACTUAL OR POTENTIAL SECURITY VULNERABILITY.
===============================================================================================
IBM Cognos Business Intelligence Server 2017Q2 Security Updater : IBM
Cognos Business Intelligence Server is affected by multiple vulnerabilities.
Document information
More support for: Cognos Business Intelligence
Security
Software version: 10.1.1, 10.2, 10.2.1, 10.2.1.1, 10.2.2
Operating system(s): AIX, HP-UX, Linux, Solaris, Windows
Reference #: 2004036
Modified date: 31 May 2017
Security Bulletin
Summary
This bulletin addresses several security vulnerabilities.
There are multiple vulnerabilities in IBM(R) Runtime Environment Java(TM)
Technology Edition, Version 6 and the IBM(R) Runtime Environment Java(TM)
Technology Edition, Version 7 that are used by IBM Cognos Business
Intelligence. These issues were disclosed as part of the IBM Java SDK
updates in October 2016 and January 2017.
IBM Cognos Business Intelligence has addressed a vulnerability caused by
an XML External Entity Injection (XXE) error when processing XML data. A
remote authenticated attacker could exploit this vulnerability to consume
all available CPU resources and cause a denial of service.
IBM Cognos Business Intelligence 10.2.2 uses GSKit. GSKit is vulnerable
to Sweet32 Birthday attacks on 64-bit block ciphers in TLS that could
allow an attacker to obtain sensitive information. This vulnerability has
been addressed.
IBM Cognos Business Intelligence has addressed a vulnerability where a
user can craft a URL which confirms the existence of, and exposes partial
contents of a file in the server's installation.
IBM Cognos Business Intelligence has addressed a vulnerability that allows
an attacker to read the contents of a local file.
IBM Cognos Business Intelligence uses Libxml2. Libxml2 is vulnerable to a
denial of service attack which could cause the application to crash. This
vulnerability has been addressed.
IBM Cognos Business Intelligence has addressed several vulnerabilities
that exist in Open Source OpenSSL. This vulnerability only affects versions
10.1.1, 10.2.1, 10.2.1.1. and 10.2.1.
Vulnerability Details
If you run your own Java code using the IBM Java Runtime delivered with this
product, you should evaluate your code to determine whether the complete
list of vulnerabilities are applicable to your code. For a complete list
of vulnerabilities please refer to the link for "IBM Java SDK Security
Bulletin" located in the "References" section for more information.
CVEID: CVE-2016-5546
DESCRIPTION: An unspecified vulnerability related to the Libraries component
has no confidentiality impact, high integrity impact, and no availability
impact.
CVSS Base Score: 7.5
CVSS Temporal Score: See
https://exchange.xforce.ibmcloud.com/vulnerabilities/120869 for the
current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
CVEID: CVE-2016-5547
DESCRIPTION: An unspecified vulnerability related to the Libraries component
could allow a remote attacker to cause a denial of service resulting in
a low availability impact using unknown attack vectors.
CVSS Base Score: 5.3
CVSS Temporal Score: See
https://exchange.xforce.ibmcloud.com/vulnerabilities/120871 for the
current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
CVEID: CVE-2016-5548
DESCRIPTION: An unspecified vulnerability related to the Libraries component
could allow a remote attacker to obtain sensitive information resulting
in a high confidentiality impact using unknown attack vectors.
CVSS Base Score: 6.5
CVSS Temporal Score: See
https://exchange.xforce.ibmcloud.com/vulnerabilities/120864 for the
current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
CVEID: CVE-2016-5549
DESCRIPTION: An unspecified vulnerability related to the Libraries component
could allow a remote attacker to obtain sensitive information resulting
in a high confidentiality impact using unknown attack vectors.
CVSS Base Score: 6.5
CVSS Temporal Score: See
https://exchange.xforce.ibmcloud.com/vulnerabilities/120863 for the
current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
CVEID: CVE-2016-5552
DESCRIPTION: An unspecified vulnerability related to the Networking
component has no confidentiality impact, low integrity impact, and no
availability impact.
CVSS Base Score: 5.3
CVSS Temporal Score: See
https://exchange.xforce.ibmcloud.com/vulnerabilities/120872 for the
current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
CVEID: CVE-2016-5554
DESCRIPTION: An unspecified vulnerability related to the JMX component has
no confidentiality impact, low integrity impact, and no availability impact.
CVSS Base Score: 4.3
CVSS Temporal Score: See
https://exchange.xforce.ibmcloud.com/vulnerabilities/118072 for the
current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)
CVEID: CVE-2016-5597
DESCRIPTION: An unspecified vulnerability related to the Networking
component could allow a remote attacker to obtain sensitive information
resulting in a high confidentiality impact using unknown attack vectors.
CVSS Base Score: 5.9
CVSS Temporal Score: See
https://exchange.xforce.ibmcloud.com/vulnerabilities/118071 for the
current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
CVEID: CVE-2017-3231
DESCRIPTION: An unspecified vulnerability related to the Networking
component could allow a remote attacker to obtain sensitive information
resulting in a low confidentiality impact using unknown attack vectors.
CVSS Base Score: 4.3
CVSS Temporal Score: See
https://exchange.xforce.ibmcloud.com/vulnerabilities/120865 for the
current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N)
CVEID: CVE-2017-3241
DESCRIPTION: An unspecified vulnerability related to the RMI component has
high confidentiality impact, high integrity impact, and high availability
impact.
CVSS Base Score: 9
CVSS Temporal Score: See
https://exchange.xforce.ibmcloud.com/vulnerabilities/120867 for the
current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H)
CVEID: CVE-2017-3252
DESCRIPTION: An unspecified vulnerability related to the JAAS component has
no confidentiality impact, high integrity impact, and no availability impact.
CVSS Base Score: 5.8
CVSS Temporal Score: See
https://exchange.xforce.ibmcloud.com/vulnerabilities/120870 for the
current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:N)
CVEID: CVE-2017-3253
DESCRIPTION: An unspecified vulnerabilityrelated to the 2D component could
allow a remote attacker to cause a denial of service resulting in a high
availability impact using unknown attack vectors.
CVSS Base Score: 7.5
CVSS Temporal Score: See
https://exchange.xforce.ibmcloud.com/vulnerabilities/120868 for the
current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
CVEID: CVE-2017-3259
DESCRIPTION: An unspecified vulnerability related to the Deployment
component could allow a remote attacker to obtain sensitive information
resulting in a low confidentiality impact using unknown attack vectors.
CVSS Base Score: 3.7
CVSS Temporal Score: See
https://exchange.xforce.ibmcloud.com/vulnerabilities/120859 for the
current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)
CVEID: CVE-2017-3261
DESCRIPTION: An unspecified vulnerability related to the Networking
component could allow a remote attacker to obtain sensitive information
resulting in a low confidentiality impact using unknown attack vectors.
CVSS Base Score: 4.3
CVSS Temporal Score: See
https://exchange.xforce.ibmcloud.com/vulnerabilities/120866 for the
current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N)
CVEID: CVE-2017-3289
DESCRIPTION: An unspecified vulnerability related to the VM component has
high confidentiality impact, high integrity impact, and high availability
impact.
CVSS Base Score: 9.6
CVSS Temporal Score: See
https://exchange.xforce.ibmcloud.com/vulnerabilities/120861 for the
current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
CVEID: CVE-2017-3272
DESCRIPTION: An unspecified vulnerability in the Libraries component has high
confidentiality impact, high integrity impact, and high availability impact.
CVSS Base Score: 9.6
CVSS Temporal Score: See
https://exchange.xforce.ibmcloud.com/vulnerabilities/120862 for the
current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
CVEID: CVE-2016-0254
DESCRIPTION: IBM Cognos Business Intelligence is vulnerable to a denial
of service, caused by an XML External Entity Injection (XXE) error when
processing XML data. A remote authenticated attacker could exploit this
vulnerability to consume all available CPU resources and cause a denial
of service.
CVSS Base Score: 4.3
CVSS Temporal Score: See
https://exchange.xforce.ibmcloud.com/vulnerabilities/110563 for the
current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
CVEID: CVE-2016-2183
DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive
information, caused by an error in the DES/3DES cipher, used as a part of the
SSL/TLS protocol. By capturing large amounts of encrypted traffic between
the SSL/TLS server and the client, a remote attacker able to conduct a
man-in-the-middle attack could exploit this vulnerability to recover the
plaintext data and obtain sensitive information. This vulnerability is
known as the SWEET32 Birthday attack.
CVSS Base Score: 3.7
CVSS Temporal Score: See
https://exchange.xforce.ibmcloud.com/vulnerabilities/116337 for the
current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)
CVEID: CVE-2016-7055
DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by an
error in a Broadwell-specific Montgomery multiplication procedure. By sending
specially crafted data, a remote attacker could exploit this vulnerability
to trigger errors in public-key operations in configurations where multiple
remote clients select an affected EC algorithm and cause a denial of service.
CVSS Base Score: 5.3
CVSS Temporal Score: See
https://exchange.xforce.ibmcloud.com/vulnerabilities/118748 for the
current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
CVEID: CVE-2016-9597
DESCRIPTION: libxml2 is vulnerable to a denial of service, caused by a
stack-based buffer overflow prior to detecting an invalid XML file. By
persuading a victim to open a specially crafted XML file, a remote attacker
could exploit this vulnerability to cause the application to crash.
CVSS Base Score: 4.3
CVSS Temporal Score: See
https://exchange.xforce.ibmcloud.com/vulnerabilities/121309 for the
current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L)
CVEID: CVE-2016-9710
DESCRIPTION: IBM Predictive Solutions Foundation (formerly PMQ) could
allow a remote attacker to include arbitrary files. A remote attacker
could send a specially-crafted URL to specify a file from the local system,
which could allow the attacker to obtain sensitive information.
CVSS Base Score: 5.3
CVSS Temporal Score: See
https://exchange.xforce.ibmcloud.com/vulnerabilities/119618 for the
current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
CVEID: CVE-2017-1125
DESCRIPTION: IBM Cognos Analytics could allow a local user to craft a URL
which could confirm the existence of and expose postial contents of a file.
CVSS Base Score: 5.1
CVSS Temporal Score: See
https://exchange.xforce.ibmcloud.com/vulnerabilities/121340 for the
current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
CVEID: CVE-2017-3730
DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a NULL
pointer dereference. By sending specially crafted parameters for a DHE or
ECDHE key exchange, a remote attacker could exploit this vulnerability to
cause the application to crash.
CVSS Base Score: 5.3
CVSS Temporal Score: See
https://exchange.xforce.ibmcloud.com/vulnerabilities/121311 for the
current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
CVEID: CVE-2017-3731
DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by
an out-of-bounds read when using a specific cipher. By sending specially
crafted truncated packets, a remote attacker could exploit this vulnerability
using CHACHA20/POLY1305 to cause the application to crash.
CVSS Base Score: 5.3
CVSS Temporal Score: See
https://exchange.xforce.ibmcloud.com/vulnerabilities/121312 for the
current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
CVEID: CVE-2017-3732
DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive
information, caused by a propagation error in the BN_mod_exp() function. An
attacker could exploit this vulnerability to obtain information about the
private key.
CVSS Base Score: 5.3
CVSS Temporal Score: See
https://exchange.xforce.ibmcloud.com/vulnerabilities/121313 for the
current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Affected Products and Versions
IBM Cognos Business Intelligence Server 10.2.2
IBM Cognos Business Intelligence Server 10.2.1.1
IBM Cognos Business Intelligence Server 10.2.1
IBM Cognos Business Intelligence Server 10.2.0
IBM Cognos Business Intelligence Server 10.1.1
Remediation/Fixes
The recommended solution is to apply the fix for versions listed as soon
as practical.
IBM Cognos Business Intelligence Server 10.2.2
IBM Cognos Business Intelligence Server 10.2.1.1
IBM Cognos Business Intelligence Server 10.2.1
IBM Cognos Business Intelligence Server 10.2.0
IBM Cognos Business Intelligence Server 10.1.1
Workarounds and Mitigations
None
References
Complete CVSS v3 Guide
On-line Calculator v3
IBM Java SDK Security Bulletin (October 2016)
IBM Java SDK Security Bulletin (January 2017)
Related information
IBM Secure Engineering Web Portal
IBM Product Security Incident Response Blog
Acknowledgement
CVE-2016-0254 was reported to IBM by Jakub Palaczynski (ING Services Polska)
Change History
31 May 2017: Original Version Published
*The CVSS Environment Score is customer environment specific and will
ultimately impact the Overall CVSS Score. Customers can evaluate the impact
of this vulnerability in their environments by accessing the links in the
Reference section of this Security Bulletin.
Disclaimer
According to the Forum of Incident Response and Security Teams (FIRST), the
Common Vulnerability Scoring System (CVSS) is an "industry open standard
designed to convey vulnerability severity and help to determine urgency
and priority of response." IBM PROVIDES THE CVSS SCORES "AS IS" WITHOUT
WARRANTY OF ANY KIND, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY AND
FITNESS FOR A PARTICULAR PURPOSE. CUSTOMERS ARE RESPONSIBLE FOR ASSESSING
THE IMPACT OF ANY ACTUAL OR POTENTIAL SECURITY VULNERABILITY.
- --------------------------END INCLUDED TEXT--------------------
You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.
NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members. As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.
NOTE: This is only the original release of the security bulletin. It may
not be updated when updates to the original are made. If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.
Contact information for the authors of the original document is included
in the Security Bulletin above. If you have any questions or need further
information, please contact them directly.
Previous advisories and external security bulletins can be retrieved from:
http://www.auscert.org.au/render.html?cid=1980
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: auscert@auscert.org.au
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967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=Rx7H
-----END PGP SIGNATURE-----