Vulnerability CVE-2015-1892 - CERT Civis.Net

Vulnerability Name:

CVE-2015-1892 (CCN-101435)

Assigned:

2015-03-30

Published:

2015-03-30

Updated:

2016-08-04

Summary:

The Multicast DNS (mDNS) responder in IBM Security Access Manager for Web 7.x before 7.0.0 FP12 and 8.x before 8.0.1 FP1 inadvertently responds to unicast queries with source addresses that are not link-local, which allows remote attackers to cause a denial of service (traffic amplification) or obtain potentially sensitive information via port-5353 UDP packets.

CVSS v3 Severity:

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): None Availibility (A): None

CVSS v2 Severity:

5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N)
3.7 Low (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): None

5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): None

Vulnerability Type:

Vulnerability Consequences:

Obtain Information

References:

Source: MITRE
Type: CNA
CVE-2015-1892

Source: AIXAPAR
Type: UNKNOWN
IV70911

Source: AIXAPAR
Type: UNKNOWN
IV70913

Source: CONFIRM
Type: Patch, Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21699497

Source: CCN
Type: IBM Security Bulletin 1699048
mDNS vulnerability affects IBM Security Access Manager for Mobile (CVE-2015-1892)

Source: CCN
Type: IBM Security Bulletin 1699497
mDNS vulnerability affects IBM Security Access Manager for Web (CVE-2015-1892)

Source: CCN
Type: IBM Security Bulletin 1701294
mDNS vulnerability affects IBM Security Identity Governance (CVE-2015-1892)

Source: CCN
Type: IBM Security Bulletin 1707262
mDNS vulnerability affects IBM Security Privileged Identity Manager Virtual Appliance (CVE-2015-1892)

Source: CCN
Type: IBM Security Bulletin 1883275
IBM Security Identity Manager Virtual Appliance Version 7.0 affected by mDNS Vulnerability (CVE-2015-1892)

Source: CCN
Type: IBM Security Bulletin 1958092
Misconfiguration issues in mDNS responder may affect IBM Security Network Protection

Source: CCN
Type: US-CERT VU#550620
Multicast DNS (mDNS) implementations may respond to unicast queries originating outside the local link

Source: CERT-VN
Type: Third Party Advisory, US Government Resource
VU#550620

Source: BID
Type: Third Party Advisory, VDB Entry
73683

Source: CCN
Type: BID-73683
Multiple Products Multicast DNS (mDNS) Implementation Information Disclosure Vulnerability

Source: XF
Type: UNKNOWN
ibm-sam-cve20151892-info-disc(101435)

Vulnerable Configuration:

Configuration 1:

cpe:/o:ibm:security_access_manager_firmware:7.0:*:web:*:*:*:*:* (Version <= 7.0.0.11)

OR cpe:/o:ibm:security_access_manager_firmware:8.0.0.1:*:web:*:*:*:*:*

OR cpe:/o:ibm:security_access_manager_firmware:8.0.0.2:*:web:*:*:*:*:*

OR cpe:/o:ibm:security_access_manager_firmware:8.0.0.3:*:web:*:*:*:*:*

OR cpe:/o:ibm:security_access_manager_firmware:8.0.0.4:*:web:*:*:*:*:*

OR cpe:/o:ibm:security_access_manager_firmware:8.0.0.5:*:web:*:*:*:*:*

OR cpe:/o:ibm:security_access_manager_firmware:8.0.1.0:*:web:*:*:*:*:*

Configuration CCN 1:

cpe:/o:ibm:security_access_manager:7.0:*:web:*:*:*:*:*

OR cpe:/o:ibm:security_access_manager:8.0:*:web:*:*:*:*:*

OR cpe:/o:ibm:security_access_manager:8.0.0.2:*:web:*:*:*:*:*

OR cpe:/o:ibm:security_access_manager:8.0.0.4:*:web:*:*:*:*:*

OR cpe:/o:ibm:security_access_manager:8.0.0.5:*:web:*:*:*:*:*

OR cpe:/o:ibm:security_access_manager:8.0.1:*:web:*:*:*:*:*

AND

cpe:/o:ibm:security_access_manager:8.0:*:mobile:*:*:*:*:*

OR cpe:/a:ibm:security_privileged_identity_manager:1.0.1:*:*:*:*:*:*:*

OR cpe:/o:ibm:security_access_manager:8.0.0.1:*:mobile:*:*:*:*:*

OR cpe:/o:ibm:security_access_manager:8.0.0.3:*:mobile:*:*:*:*:*

OR cpe:/o:ibm:security_access_manager:8.0.0.4:*:mobile:*:*:*:*:*

OR cpe:/o:ibm:security_access_manager:8.0.0.5:*:mobile:*:*:*:*:*

OR cpe:/a:ibm:security_privileged_identity_manager:2.0.0:*:*:*:*:*:*:*

OR cpe:/o:ibm:security_access_manager:8.0.1:*:mobile:*:*:*:*:*

OR cpe:/a:ibm:security_identity_manager:7.0.0.0:*:*:*:*:*:*:*

Denotes that component is vulnerable