Vulnerability CVE-2014-4834 - CERT Civis.Net

Vulnerability Name:

CVE-2014-4834 (CCN-95628)

Assigned:

2014-10-31

Published:

2014-10-31

Updated:

2019-09-30

Summary:

IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.8 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption, and application crash) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.

CWE-611: Improper Restriction of XML External Entity Reference ('XXE')

CVSS v3 Severity:

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Low

CVSS v2 Severity:

4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P)
3.2 Low (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

4.3 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P)
3.2 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Denial of Service

References:

Source: MITRE
Type: CNA
CVE-2014-4834

Source: AIXAPAR
Type: UNKNOWN
JR49897

Source: AIXAPAR
Type: UNKNOWN
JR50553

Source: CONFIRM
Type: Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21685464

Source: CCN
Type: IBM Security Bulletin 1685464
Multiple Security vulnerabilities found in WebSphere Commerce XML External Entity (XXE) Processing (CVE-2014-4834, CVE-2014-4769 )

Source: BID
Type: UNKNOWN
70870

Source: CCN
Type: BID-70870
IBM WebSphere Commerce CVE-2014-4834 XML External Entity Denial of Service Vulnerability

Source: XF
Type: UNKNOWN
ibm-websphere-cve20144834-dos(95628)

Source: XF
Type: UNKNOWN
ibm-websphere-cve20144834-dos(95628)

Vulnerable Configuration:

Configuration 1:

cpe:/a:ibm:websphere_commerce:6.0.0.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_commerce:6.0.0.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_commerce:6.0.0.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_commerce:6.0.0.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_commerce:6.0.0.4:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_commerce:6.0.0.5:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_commerce:6.0.0.6:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_commerce:6.0.0.7:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_commerce:6.0.0.8:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_commerce:6.0.0.9:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_commerce:6.0.0.10:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_commerce:6.0.0.11:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_commerce:7.0.0.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_commerce:7.0.0.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_commerce:7.0.0.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_commerce:7.0.0.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_commerce:7.0.0.4:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_commerce:7.0.0.5:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_commerce:7.0.0.6:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_commerce:7.0.0.7:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_commerce:7.0.0.8:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:ibm:websphere_commerce:6.0.0.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_commerce:7.0.0.0:*:*:*:*:*:*:*

Denotes that component is vulnerable