var-201504-0377
Vulnerability from variot
The Multicast DNS (mDNS) responder in IBM Security Access Manager for Web 7.x before 7.0.0 FP12 and 8.x before 8.0.1 FP1 inadvertently responds to unicast queries with source addresses that are not link-local, which allows remote attackers to cause a denial of service (traffic amplification) or obtain potentially sensitive information via port-5353 UDP packets. Multicast DNS implementations may respond to unicast queries that originate from sources outside of the local link network. Such responses may disclose information about network devices or be used in denial-of-service (DoS) amplification attacks. Multiple products are prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information or crash the system, resulting in a denial-of-service condition. Other attacks are also possible. IBM Security Access Manager (ISAM) for Web (formerly known as IBM Tivoli Access Manager for e-business) is a set of products used in user authentication, authorization and Web single sign-on solutions of IBM Corporation in the United States. It provides user access management and Web application protection function. The following versions are affected: ISAM for Web 7.0 with firmware 7.0.0.11 and earlier, and ISAM for Web 8.0 with firmware 8.0.0.1 through 8.0.0.5 and 8.0.1.0
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201504-0377",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "security access manager for web 8.0",
"scope": "eq",
"trust": 1.6,
"vendor": "ibm",
"version": "8.0.1.0"
},
{
"model": "security access manager for web 8.0",
"scope": "eq",
"trust": 1.6,
"vendor": "ibm",
"version": "8.0.0.5"
},
{
"model": "security access manager for web 8.0",
"scope": "eq",
"trust": 1.6,
"vendor": "ibm",
"version": "8.0.0.2"
},
{
"model": "security access manager for web 8.0",
"scope": "eq",
"trust": 1.6,
"vendor": "ibm",
"version": "8.0.0.1"
},
{
"model": "security access manager for web 8.0",
"scope": "eq",
"trust": 1.6,
"vendor": "ibm",
"version": "8.0.0.4"
},
{
"model": "security access manager for web 8.0",
"scope": "eq",
"trust": 1.6,
"vendor": "ibm",
"version": "8.0.0.3"
},
{
"model": "security access manager for web 7.0",
"scope": "lte",
"trust": 1.0,
"vendor": "ibm",
"version": "7.0.0.11"
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "avahi mdns",
"version": null
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "canon",
"version": null
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "hewlett packard",
"version": null
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "ibm",
"version": null
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "synology",
"version": null
},
{
"model": "security access manager for web software",
"scope": "eq",
"trust": 0.8,
"vendor": "ibm",
"version": "7.0.0 fp12"
},
{
"model": "security access manager for web software",
"scope": "lt",
"trust": 0.8,
"vendor": "ibm",
"version": "8.x"
},
{
"model": "security access manager for web software",
"scope": "lt",
"trust": 0.8,
"vendor": "ibm",
"version": "7.x"
},
{
"model": "security access manager for web software",
"scope": "eq",
"trust": 0.8,
"vendor": "ibm",
"version": "8.0.1 fp1"
},
{
"model": "security access manager for web 7.0",
"scope": "eq",
"trust": 0.6,
"vendor": "ibm",
"version": "7.0.0.11"
},
{
"model": "color laserjet",
"scope": "eq",
"trust": 0.3,
"vendor": "hp",
"version": "47000"
},
{
"model": "avahi",
"scope": "eq",
"trust": 0.3,
"vendor": "avahi",
"version": "0.6.26"
},
{
"model": "avahi",
"scope": "eq",
"trust": 0.3,
"vendor": "avahi",
"version": "0.6.25"
},
{
"model": "avahi",
"scope": "eq",
"trust": 0.3,
"vendor": "avahi",
"version": "0.6.24"
},
{
"model": "avahi",
"scope": "eq",
"trust": 0.3,
"vendor": "avahi",
"version": "0.6.23"
},
{
"model": "avahi",
"scope": "eq",
"trust": 0.3,
"vendor": "avahi",
"version": "0.6.20"
},
{
"model": "avahi",
"scope": "eq",
"trust": 0.3,
"vendor": "avahi",
"version": "0.6.16"
},
{
"model": "avahi",
"scope": "eq",
"trust": 0.3,
"vendor": "avahi",
"version": "0.6.15"
},
{
"model": "avahi",
"scope": "eq",
"trust": 0.3,
"vendor": "avahi",
"version": "0.6.13"
},
{
"model": "avahi",
"scope": "eq",
"trust": 0.3,
"vendor": "avahi",
"version": "0.6.11"
},
{
"model": "avahi",
"scope": "eq",
"trust": 0.3,
"vendor": "avahi",
"version": "0.6.10"
},
{
"model": "avahi",
"scope": "eq",
"trust": 0.3,
"vendor": "avahi",
"version": "0.6.9"
},
{
"model": "avahi",
"scope": "eq",
"trust": 0.3,
"vendor": "avahi",
"version": "0.6.8"
},
{
"model": "avahi",
"scope": "eq",
"trust": 0.3,
"vendor": "avahi",
"version": "0.6.7"
},
{
"model": "avahi",
"scope": "eq",
"trust": 0.3,
"vendor": "avahi",
"version": "0.5.2"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#550620"
},
{
"db": "BID",
"id": "73683"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-002048"
},
{
"db": "NVD",
"id": "CVE-2015-1892"
},
{
"db": "CNNVD",
"id": "CNNVD-201503-653"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "7.0.0.11",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.0.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.0.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.0.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.0.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.1.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.0.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2015-1892"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Chad Seaman",
"sources": [
{
"db": "BID",
"id": "73683"
}
],
"trust": 0.3
},
"cve": "CVE-2015-1892",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"integrityImpact": "NONE",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"trust": 1.0,
"userInteractionRequired": false,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 5.0,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "CVE-2015-1892",
"impactScore": null,
"integrityImpact": "None",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "VHN-79853",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "NVD",
"id": "CVE-2015-1892",
"trust": 1.8,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201503-653",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-79853",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-79853"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-002048"
},
{
"db": "NVD",
"id": "CVE-2015-1892"
},
{
"db": "CNNVD",
"id": "CNNVD-201503-653"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "The Multicast DNS (mDNS) responder in IBM Security Access Manager for Web 7.x before 7.0.0 FP12 and 8.x before 8.0.1 FP1 inadvertently responds to unicast queries with source addresses that are not link-local, which allows remote attackers to cause a denial of service (traffic amplification) or obtain potentially sensitive information via port-5353 UDP packets. Multicast DNS implementations may respond to unicast queries that originate from sources outside of the local link network. Such responses may disclose information about network devices or be used in denial-of-service (DoS) amplification attacks. Multiple products are prone to an information-disclosure vulnerability. \nAttackers can exploit this issue to obtain sensitive information or crash the system, resulting in a denial-of-service condition. Other attacks are also possible. IBM Security Access Manager (ISAM) for Web (formerly known as IBM Tivoli Access Manager for e-business) is a set of products used in user authentication, authorization and Web single sign-on solutions of IBM Corporation in the United States. It provides user access management and Web application protection function. The following versions are affected: ISAM for Web 7.0 with firmware 7.0.0.11 and earlier, and ISAM for Web 8.0 with firmware 8.0.0.1 through 8.0.0.5 and 8.0.1.0",
"sources": [
{
"db": "NVD",
"id": "CVE-2015-1892"
},
{
"db": "CERT/CC",
"id": "VU#550620"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-002048"
},
{
"db": "BID",
"id": "73683"
},
{
"db": "VULHUB",
"id": "VHN-79853"
}
],
"trust": 2.7
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "CERT/CC",
"id": "VU#550620",
"trust": 3.3
},
{
"db": "NVD",
"id": "CVE-2015-1892",
"trust": 2.8
},
{
"db": "BID",
"id": "73683",
"trust": 1.4
},
{
"db": "JVN",
"id": "JVNVU98589419",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2015-002048",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201503-653",
"trust": 0.7
},
{
"db": "VULHUB",
"id": "VHN-79853",
"trust": 0.1
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#550620"
},
{
"db": "VULHUB",
"id": "VHN-79853"
},
{
"db": "BID",
"id": "73683"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-002048"
},
{
"db": "NVD",
"id": "CVE-2015-1892"
},
{
"db": "CNNVD",
"id": "CNNVD-201503-653"
}
]
},
"id": "VAR-201504-0377",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-79853"
}
],
"trust": 0.01
},
"last_update_date": "2023-12-18T12:38:00.036000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "1699497",
"trust": 0.8,
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21699497"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2015-002048"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-200",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-79853"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-002048"
},
{
"db": "NVD",
"id": "CVE-2015-1892"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.5,
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21699497"
},
{
"trust": 2.5,
"url": "http://www.kb.cert.org/vuls/id/550620"
},
{
"trust": 1.7,
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1iv70911"
},
{
"trust": 1.7,
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1iv70913"
},
{
"trust": 1.6,
"url": "https://github.com/chadillac/mdns_recon"
},
{
"trust": 1.1,
"url": "http://www.securityfocus.com/bid/73683"
},
{
"trust": 0.8,
"url": "http://www.ietf.org/rfc/rfc6762.txt"
},
{
"trust": 0.8,
"url": "https://www.usa.canon.com/cusa/support/consumer?pagekeycode=prdadvdetail\u0026docid=0901e02480ea9d5d"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-1892"
},
{
"trust": 0.8,
"url": "http://jvn.jp/vu/jvnvu98589419/index.html"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-1892"
},
{
"trust": 0.8,
"url": "https://tools.ietf.org/html/rfc6762#section-5.5"
},
{
"trust": 0.3,
"url": "http://www.ibm.com/"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#550620"
},
{
"db": "VULHUB",
"id": "VHN-79853"
},
{
"db": "BID",
"id": "73683"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-002048"
},
{
"db": "NVD",
"id": "CVE-2015-1892"
},
{
"db": "CNNVD",
"id": "CNNVD-201503-653"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CERT/CC",
"id": "VU#550620"
},
{
"db": "VULHUB",
"id": "VHN-79853"
},
{
"db": "BID",
"id": "73683"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-002048"
},
{
"db": "NVD",
"id": "CVE-2015-1892"
},
{
"db": "CNNVD",
"id": "CNNVD-201503-653"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2015-03-31T00:00:00",
"db": "CERT/CC",
"id": "VU#550620"
},
{
"date": "2015-04-01T00:00:00",
"db": "VULHUB",
"id": "VHN-79853"
},
{
"date": "2015-03-31T00:00:00",
"db": "BID",
"id": "73683"
},
{
"date": "2015-04-06T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2015-002048"
},
{
"date": "2015-04-01T02:00:32.220000",
"db": "NVD",
"id": "CVE-2015-1892"
},
{
"date": "2015-03-31T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201503-653"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2015-05-15T00:00:00",
"db": "CERT/CC",
"id": "VU#550620"
},
{
"date": "2016-08-04T00:00:00",
"db": "VULHUB",
"id": "VHN-79853"
},
{
"date": "2015-05-15T00:14:00",
"db": "BID",
"id": "73683"
},
{
"date": "2015-04-06T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2015-002048"
},
{
"date": "2016-08-04T03:25:56.670000",
"db": "NVD",
"id": "CVE-2015-1892"
},
{
"date": "2015-04-02T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201503-653"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201503-653"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Multicast DNS (mDNS) implementations may respond to unicast queries originating outside the local link",
"sources": [
{
"db": "CERT/CC",
"id": "VU#550620"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "information disclosure",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201503-653"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.