cnvd - cnvd-2016-00083

CNVD-2016-00083

Vulnerability from cnvd - Published: 2016-01-07

Title

IBM Security Access Manager for Web和Security Access Manager命令注入漏洞

Description

IBM Security Access Manager（ISAM）for Web（前称IBM Tivoli Access Manager for e-business）和Security Access Manager（ISAM）都是美国IBM公司的产品。前者是一套用于用户认证、授权和Web单点登录解决方案中的产品，它提供用户访问管理和Web应用保护功能，后者是一套可扩展的为网络、云及移动环境安全接入管理解决方案。它能够帮助客户企业查看众多网络应用及服务中的用户接入行为，并解决其所带来安全问题。 ISAM for Web和ISAM中存在安全漏洞。远程攻击者可借助Local Management Interface(LMI)访问权限利用该漏洞执行任意OS命令。

Severity

高

Patch Name

IBM Security Access Manager for Web和Security Access Manager命令注入漏洞的补丁

Patch Description

IBM Security Access Manager（ISAM）for Web（前称IBM Tivoli Access Manager for e-business）和Security Access Manager（ISAM）都是美国IBM公司的产品。前者是一套用于用户认证、授权和Web单点登录解决方案中的产品，它提供用户访问管理和Web应用保护功能，后者是一套可扩展的为网络、云及移动环境安全接入管理解决方案。它能够帮助客户企业查看众多网络应用及服务中的用户接入行为，并解决其所带来安全问题。 ISAM for Web和ISAM中存在安全漏洞。攻击者可借助Local Management Interface(LMI)访问权限利用该漏洞执行任意OS命令。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接： http://www-01.ibm.com/support/docview.wss?uid=swg21970510

Reference

http://www-01.ibm.com/support/docview.wss?uid=swg21970510

Impacted products

Name
['IBM Security Access Manager for Web 7.0', 'IBM Security Access Manager for Web 8.0', 'IBM Security Access Manager 9.0']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2015-5018"
    }
  },
  "description": "IBM Security Access Manager\uff08ISAM\uff09for Web\uff08\u524d\u79f0IBM Tivoli Access Manager for e-business\uff09\u548cSecurity Access Manager\uff08ISAM\uff09\u90fd\u662f\u7f8e\u56fdIBM\u516c\u53f8\u7684\u4ea7\u54c1\u3002\u524d\u8005\u662f\u4e00\u5957\u7528\u4e8e\u7528\u6237\u8ba4\u8bc1\u3001\u6388\u6743\u548cWeb\u5355\u70b9\u767b\u5f55\u89e3\u51b3\u65b9\u6848\u4e2d\u7684\u4ea7\u54c1\uff0c\u5b83\u63d0\u4f9b\u7528\u6237\u8bbf\u95ee\u7ba1\u7406\u548cWeb\u5e94\u7528\u4fdd\u62a4\u529f\u80fd\uff0c\u540e\u8005\u662f\u4e00\u5957\u53ef\u6269\u5c55\u7684\u4e3a\u7f51\u7edc\u3001\u4e91\u53ca\u79fb\u52a8\u73af\u5883\u5b89\u5168\u63a5\u5165\u7ba1\u7406\u89e3\u51b3\u65b9\u6848\u3002\u5b83\u80fd\u591f\u5e2e\u52a9\u5ba2\u6237\u4f01\u4e1a\u67e5\u770b\u4f17\u591a\u7f51\u7edc\u5e94\u7528\u53ca\u670d\u52a1\u4e2d\u7684\u7528\u6237\u63a5\u5165\u884c\u4e3a\uff0c\u5e76\u89e3\u51b3\u5176\u6240\u5e26\u6765\u5b89\u5168\u95ee\u9898\u3002\r\n\r\nISAM for Web\u548cISAM\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u501f\u52a9Local Management Interface(LMI)\u8bbf\u95ee\u6743\u9650\u5229\u7528\u8be5\u6f0f\u6d1e\u6267\u884c\u4efb\u610fOS\u547d\u4ee4\u3002",
  "discovererName": "IBM",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6b64\u5b89\u5168\u95ee\u9898\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttp://www-01.ibm.com/support/docview.wss?uid=swg21970510",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2016-00083",
  "openTime": "2016-01-07",
  "patchDescription": "IBM Security Access Manager\uff08ISAM\uff09for Web\uff08\u524d\u79f0IBM Tivoli Access Manager for e-business\uff09\u548cSecurity Access Manager\uff08ISAM\uff09\u90fd\u662f\u7f8e\u56fdIBM\u516c\u53f8\u7684\u4ea7\u54c1\u3002\u524d\u8005\u662f\u4e00\u5957\u7528\u4e8e\u7528\u6237\u8ba4\u8bc1\u3001\u6388\u6743\u548cWeb\u5355\u70b9\u767b\u5f55\u89e3\u51b3\u65b9\u6848\u4e2d\u7684\u4ea7\u54c1\uff0c\u5b83\u63d0\u4f9b\u7528\u6237\u8bbf\u95ee\u7ba1\u7406\u548cWeb\u5e94\u7528\u4fdd\u62a4\u529f\u80fd\uff0c\u540e\u8005\u662f\u4e00\u5957\u53ef\u6269\u5c55\u7684\u4e3a\u7f51\u7edc\u3001\u4e91\u53ca\u79fb\u52a8\u73af\u5883\u5b89\u5168\u63a5\u5165\u7ba1\u7406\u89e3\u51b3\u65b9\u6848\u3002\u5b83\u80fd\u591f\u5e2e\u52a9\u5ba2\u6237\u4f01\u4e1a\u67e5\u770b\u4f17\u591a\u7f51\u7edc\u5e94\u7528\u53ca\u670d\u52a1\u4e2d\u7684\u7528\u6237\u63a5\u5165\u884c\u4e3a\uff0c\u5e76\u89e3\u51b3\u5176\u6240\u5e26\u6765\u5b89\u5168\u95ee\u9898\u3002\r\n\r\nISAM for Web\u548cISAM\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u501f\u52a9Local Management Interface(LMI)\u8bbf\u95ee\u6743\u9650\u5229\u7528\u8be5\u6f0f\u6d1e\u6267\u884c\u4efb\u610fOS\u547d\u4ee4\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "IBM Security Access Manager for Web\u548cSecurity Access Manager\u547d\u4ee4\u6ce8\u5165\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "IBM Security Access Manager for Web 7.0",
      "IBM Security Access Manager for Web  8.0",
      "IBM Security Access Manager 9.0"
    ]
  },
  "referenceLink": "http://www-01.ibm.com/support/docview.wss?uid=swg21970510",
  "serverity": "\u9ad8",
  "submitTime": "2016-01-06",
  "title": "IBM Security Access Manager for Web\u548cSecurity Access Manager\u547d\u4ee4\u6ce8\u5165\u6f0f\u6d1e"
}

CVE-2015-5018 (GCVE-0-2015-5018)

Vulnerability from cvelistv5 – Published: 2016-01-02 02:00 – Updated: 2024-08-06 06:32

Summary

IBM Security Access Manager for Web 7.0.0 before FP19 and 8.0 before 8.0.1.3 IF3, and Security Access Manager 9.0 before 9.0.0.0 IF1, allows remote authenticated users to execute arbitrary OS commands by leveraging Local Management Interface (LMI) access.

Severity ?

No CVSS data available.

CWE

Assigner

ibm

References

URL

Tags

	http://www-01.ibm.com/support/docview.wss?uid=swg…	vendor-advisoryx_refsource_AIXAPAR
	http://www-01.ibm.com/support/docview.wss?uid=swg…	x_refsource_CONFIRM
	http://www-01.ibm.com/support/docview.wss?uid=swg…	vendor-advisoryx_refsource_AIXAPAR
	http://www.securitytracker.com/id/1034560	vdb-entryx_refsource_SECTRACK

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T06:32:32.301Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "IV78768",
            "tags": [
              "vendor-advisory",
              "x_refsource_AIXAPAR",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IV78768"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21970510"
          },
          {
            "name": "IV78780",
            "tags": [
              "vendor-advisory",
              "x_refsource_AIXAPAR",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IV78780"
          },
          {
            "name": "1034560",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1034560"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-12-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "IBM Security Access Manager for Web 7.0.0 before FP19 and 8.0 before 8.0.1.3 IF3, and Security Access Manager 9.0 before 9.0.0.0 IF1, allows remote authenticated users to execute arbitrary OS commands by leveraging Local Management Interface (LMI) access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-05T14:57:01",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "name": "IV78768",
          "tags": [
            "vendor-advisory",
            "x_refsource_AIXAPAR"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IV78768"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21970510"
        },
        {
          "name": "IV78780",
          "tags": [
            "vendor-advisory",
            "x_refsource_AIXAPAR"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IV78780"
        },
        {
          "name": "1034560",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1034560"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@us.ibm.com",
          "ID": "CVE-2015-5018",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "IBM Security Access Manager for Web 7.0.0 before FP19 and 8.0 before 8.0.1.3 IF3, and Security Access Manager 9.0 before 9.0.0.0 IF1, allows remote authenticated users to execute arbitrary OS commands by leveraging Local Management Interface (LMI) access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "IV78768",
              "refsource": "AIXAPAR",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IV78768"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21970510",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21970510"
            },
            {
              "name": "IV78780",
              "refsource": "AIXAPAR",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IV78780"
            },
            {
              "name": "1034560",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1034560"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2015-5018",
    "datePublished": "2016-01-02T02:00:00",
    "dateReserved": "2015-06-24T00:00:00",
    "dateUpdated": "2024-08-06T06:32:32.301Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2016-00083

CVE-2015-5018 (GCVE-0-2015-5018)

Tags

Sightings

Nomenclature