csaf_certbund - wid-sec-w-2023-0493

wid-sec-w-2023-0493

Vulnerability from csaf_certbund

Published

2023-02-27 23:00

Modified

2023-02-27 23:00

Summary

Hitachi Ops Center: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung

Hitachi Ops Center ist eine Softwarelösung für Rechenzentren zur Verwaltung, Optimierung, Orchestrierung und zum Schutz von Daten.

Angriff

Ein Angreifer kann mehrere Schwachstellen in Hitachi Ops Center ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.

Betroffene Betriebssysteme

- Linux

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         text: "mittel",
      },
      category: "csaf_base",
      csaf_version: "2.0",
      distribution: {
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "de-DE",
      notes: [
         {
            category: "legal_disclaimer",
            text: "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.",
         },
         {
            category: "description",
            text: "Hitachi Ops Center ist eine Softwarelösung für Rechenzentren zur Verwaltung, Optimierung, Orchestrierung und zum Schutz von Daten.",
            title: "Produktbeschreibung",
         },
         {
            category: "summary",
            text: "Ein  Angreifer kann mehrere Schwachstellen in Hitachi Ops Center ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.",
            title: "Angriff",
         },
         {
            category: "general",
            text: "- Linux",
            title: "Betroffene Betriebssysteme",
         },
      ],
      publisher: {
         category: "other",
         contact_details: "csaf-provider@cert-bund.de",
         name: "Bundesamt für Sicherheit in der Informationstechnik",
         namespace: "https://www.bsi.bund.de",
      },
      references: [
         {
            category: "self",
            summary: "WID-SEC-W-2023-0493 - CSAF Version",
            url: "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-0493.json",
         },
         {
            category: "self",
            summary: "WID-SEC-2023-0493 - Portal Version",
            url: "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0493",
         },
         {
            category: "external",
            summary: "Hitachi Ops Center Common Services  vom 2023-02-27",
            url: "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-107/index.html",
         },
      ],
      source_lang: "en-US",
      title: "Hitachi Ops Center: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff",
      tracking: {
         current_release_date: "2023-02-27T23:00:00.000+00:00",
         generator: {
            date: "2024-08-15T17:44:54.117+00:00",
            engine: {
               name: "BSI-WID",
               version: "1.3.5",
            },
         },
         id: "WID-SEC-W-2023-0493",
         initial_release_date: "2023-02-27T23:00:00.000+00:00",
         revision_history: [
            {
               date: "2023-02-27T23:00:00.000+00:00",
               number: "1",
               summary: "Initiale Fassung",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  category: "product_name",
                  name: "Hitachi Ops Center Common Services < 10.9.1-00",
                  product: {
                     name: "Hitachi Ops Center Common Services < 10.9.1-00",
                     product_id: "T026524",
                     product_identification_helper: {
                        cpe: "cpe:/a:hitachi:ops_center:common_services_10.9.1-00",
                     },
                  },
               },
            ],
            category: "vendor",
            name: "Hitachi",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2022-31692",
         notes: [
            {
               category: "description",
               text: "Es existieren mehrere Schwachstellen in Hitachi Ops Center, die zum aktuellen Zeitpunkt nicht im Detail beschrieben und veröffentlicht wurden. Ein Angreifer kann diese Schwachstellen ausnutzen, um nicht näher spezifizierte Auswirkungen zu verursachen.",
            },
         ],
         release_date: "2023-02-27T23:00:00.000+00:00",
         title: "CVE-2022-31692",
      },
      {
         cve: "CVE-2022-31690",
         notes: [
            {
               category: "description",
               text: "Es existieren mehrere Schwachstellen in Hitachi Ops Center, die zum aktuellen Zeitpunkt nicht im Detail beschrieben und veröffentlicht wurden. Ein Angreifer kann diese Schwachstellen ausnutzen, um nicht näher spezifizierte Auswirkungen zu verursachen.",
            },
         ],
         release_date: "2023-02-27T23:00:00.000+00:00",
         title: "CVE-2022-31690",
      },
   ],
}

cve-2022-31690

Vulnerability from cvelistv5

Published

2022-10-31 00:00

Modified

2024-08-03 07:26

Severity ?

Summary

Spring Security, versions 5.7 prior to 5.7.5, and 5.6 prior to 5.6.9, and older unsupported versions could be susceptible to a privilege escalation under certain conditions. A malicious user or attacker can modify a request initiated by the Client (via the browser) to the Authorization Server which can lead to a privilege escalation on the subsequent approval. This scenario can happen if the Authorization Server responds with an OAuth2 Access Token Response containing an empty scope list (per RFC 6749, Section 5.1) on the subsequent request to the token endpoint to obtain the access token.

References

▼	URL	Tags
	https://tanzu.vmware.com/security/cve-2022-31690
	https://security.netapp.com/advisory/ntap-20221215-0010/

Impacted products

	Vendor	Product	Version
	n/a	Spring Security	Version: Spring Security (5.7 to 5.7.4 and 5.6 to 5.6.8 as well as older, unsupported versions)

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T07:26:01.073Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://tanzu.vmware.com/security/cve-2022-31690",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20221215-0010/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Spring Security",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "Spring Security (5.7 to 5.7.4 and 5.6 to 5.6.8 as well as older, unsupported versions)",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Spring Security, versions 5.7 prior to 5.7.5, and 5.6 prior to 5.6.9, and older unsupported versions could be susceptible to a privilege escalation under certain conditions. A malicious user or attacker can modify a request initiated by the Client (via the browser) to the Authorization Server which can lead to a privilege escalation on the subsequent approval. This scenario can happen if the Authorization Server responds with an OAuth2 Access Token Response containing an empty scope list (per RFC 6749, Section 5.1) on the subsequent request to the token endpoint to obtain the access token.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Privilege Escalation in spring-security-oauth2-client",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-12-15T00:00:00",
            orgId: "dcf2e128-44bd-42ed-91e8-88f912c1401d",
            shortName: "vmware",
         },
         references: [
            {
               url: "https://tanzu.vmware.com/security/cve-2022-31690",
            },
            {
               url: "https://security.netapp.com/advisory/ntap-20221215-0010/",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "dcf2e128-44bd-42ed-91e8-88f912c1401d",
      assignerShortName: "vmware",
      cveId: "CVE-2022-31690",
      datePublished: "2022-10-31T00:00:00",
      dateReserved: "2022-05-25T00:00:00",
      dateUpdated: "2024-08-03T07:26:01.073Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2022-31692

Vulnerability from cvelistv5

Published

2022-10-31 00:00

Modified

2024-08-03 07:26

Severity ?

Summary

Spring Security, versions 5.7 prior to 5.7.5 and 5.6 prior to 5.6.9 could be susceptible to authorization rules bypass via forward or include dispatcher types. Specifically, an application is vulnerable when all of the following are true: The application expects that Spring Security applies security to forward and include dispatcher types. The application uses the AuthorizationFilter either manually or via the authorizeHttpRequests() method. The application configures the FilterChainProxy to apply to forward and/or include requests (e.g. spring.security.filter.dispatcher-types = request, error, async, forward, include). The application may forward or include the request to a higher privilege-secured endpoint.The application configures Spring Security to apply to every dispatcher type via authorizeHttpRequests().shouldFilterAllDispatcherTypes(true)

References

▼	URL	Tags
	https://tanzu.vmware.com/security/cve-2022-31692
	https://security.netapp.com/advisory/ntap-20221215-0010/

Impacted products

	Vendor	Product	Version
	n/a	Spring by VMware	Version: 5.7 to 5.7.4, 5.6 to 5.6.8 and older versions

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T07:26:01.017Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://tanzu.vmware.com/security/cve-2022-31692",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20221215-0010/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Spring by VMware",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "5.7 to 5.7.4, 5.6 to 5.6.8 and older versions",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Spring Security, versions 5.7 prior to 5.7.5 and 5.6 prior to 5.6.9 could be susceptible to authorization rules bypass via forward or include dispatcher types. Specifically, an application is vulnerable when all of the following are true: The application expects that Spring Security applies security to forward and include dispatcher types. The application uses the AuthorizationFilter either manually or via the authorizeHttpRequests() method. The application configures the FilterChainProxy to apply to forward and/or include requests (e.g. spring.security.filter.dispatcher-types = request, error, async, forward, include). The application may forward or include the request to a higher privilege-secured endpoint.The application configures Spring Security to apply to every dispatcher type via authorizeHttpRequests().shouldFilterAllDispatcherTypes(true)",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Spring is susceptible to authorization rules bypass via forward or include dispatcher types.",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-12-15T00:00:00",
            orgId: "dcf2e128-44bd-42ed-91e8-88f912c1401d",
            shortName: "vmware",
         },
         references: [
            {
               url: "https://tanzu.vmware.com/security/cve-2022-31692",
            },
            {
               url: "https://security.netapp.com/advisory/ntap-20221215-0010/",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "dcf2e128-44bd-42ed-91e8-88f912c1401d",
      assignerShortName: "vmware",
      cveId: "CVE-2022-31692",
      datePublished: "2022-10-31T00:00:00",
      dateReserved: "2022-05-25T00:00:00",
      dateUpdated: "2024-08-03T07:26:01.017Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

wid-sec-w-2023-0493

Vulnerability from csaf_certbund

cve-2022-31690

Vulnerability from cvelistv5

cve-2022-31692

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature