Vulnerability CVE-2015-7425 - CERT Civis.Net

Vulnerability Name:

CVE-2015-7425 (CCN-107784)

Assigned:

2015-12-11

Published:

2015-12-11

Updated:

2016-11-28

Summary:

The Data Protection component in the VMware vSphere GUI in IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware (aka Spectrum Protect for Virtual Environments) 6.3 before 6.3.2.5, 6.4 before 6.4.3.1, and 7.1 before 7.1.4 and Tivoli Storage FlashCopy Manager for VMware (aka Spectrum Protect Snapshot) 3.1 before 3.1.1.3, 3.2 before 3.2.0.6, and 4.1 before 4.1.4 allows remote attackers to obtain administrative privileges via a crafted URL that triggers back-end function execution.

CVSS v3 Severity:

10.0 Critical (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
8.7 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

10.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
8.7 High (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

10.0 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

10.0 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2015-7425

Source: CONFIRM
Type: Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21973086

Source: CCN
Type: IBM Security Bulletin 1973086 (Spectrum Protect for Virtual Environments)
Tivoli Storage Manager for Virtual Environments: Data Protection for VMware and Tivoli Storage FlashCopy Manager for VMware affected by unauthorized access vulnerability (CVE-2015-7420)

Source: BID
Type: UNKNOWN
79545

Source: CCN
Type: BID-79545
IBM Tivoli Storage FlashCopy Manager and Tivoli Storage Manager Privilege Escalation Vulnerability

Source: XF
Type: UNKNOWN
ibm-tivoli-cve20157425-command-exec(107784)

Vulnerable Configuration:

Configuration 1:

cpe:/a:ibm:tivoli_storage_flashcopy_manager_for_vmware:3.1:*:*:*:*:vmware:*:*

OR cpe:/a:ibm:tivoli_storage_flashcopy_manager_for_vmware:3.1.1:*:*:*:*:vmware:*:*

OR cpe:/a:ibm:tivoli_storage_flashcopy_manager_for_vmware:3.2:*:*:*:*:vmware:*:*

OR cpe:/a:ibm:tivoli_storage_flashcopy_manager_for_vmware:6.3:*:*:*:*:vmware:*:*

OR cpe:/a:ibm:tivoli_storage_flashcopy_manager_for_vmware:6.4:*:*:*:*:vmware:*:*

OR cpe:/a:ibm:tivoli_storage_flashcopy_manager_for_vmware:6.4.2:*:*:*:*:vmware:*:*

OR cpe:/a:ibm:tivoli_storage_flashcopy_manager_for_vmware:6.4.3:*:*:*:*:vmware:*:*

OR cpe:/a:ibm:tivoli_storage_manager_for_virtual_environments_data_protection_for_vmware:4.1.0:*:*:*:*:vmware:*:*

OR cpe:/a:ibm:tivoli_storage_manager_for_virtual_environments_data_protection_for_vmware:4.1.1:*:*:*:*:vmware:*:*

OR cpe:/a:ibm:tivoli_storage_manager_for_virtual_environments_data_protection_for_vmware:4.1.2:*:*:*:*:vmware:*:*

OR cpe:/a:ibm:tivoli_storage_manager_for_virtual_environments_data_protection_for_vmware:4.1.3:*:*:*:*:vmware:*:*

OR cpe:/a:ibm:tivoli_storage_manager_for_virtual_environments_data_protection_for_vmware:6.3.1:*:*:*:*:vmware:*:*

OR cpe:/a:ibm:tivoli_storage_manager_for_virtual_environments_data_protection_for_vmware:6.3.2:*:*:*:*:vmware:*:*

OR cpe:/a:ibm:tivoli_storage_manager_for_virtual_environments_data_protection_for_vmware:6.4.1:*:*:*:*:vmware:*:*

OR cpe:/a:ibm:tivoli_storage_manager_for_virtual_environments_data_protection_for_vmware:7.1.0:*:*:*:*:vmware:*:*

OR cpe:/a:ibm:tivoli_storage_manager_for_virtual_environments_data_protection_for_vmware:7.1.1:*:*:*:*:vmware:*:*

OR cpe:/a:ibm:tivoli_storage_manager_for_virtual_environments_data_protection_for_vmware:7.1.2:*:*:*:*:vmware:*:*

OR cpe:/a:ibm:tivoli_storage_manager_for_virtual_environments_data_protection_for_vmware:7.1.3:*:*:*:*:vmware:*:*

Configuration CCN 1:

cpe:/a:ibm:spectrum_protect_for_virtual_environments:7.1:*:*:*:*:hyper-v:*:*

Denotes that component is vulnerable