CVE-2022-22364mediumCWE-350

CVE-2022-22364: medium-severity vulnerability in IBM Cognos Controller

IBM Cognos Controller security bypass

Published · Updated

Follow this CVE+ Monitor Cognos Controller

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 0.5%
In short

IBM Cognos Controller fails to properly validate user input, allowing attackers to trick the application into making DNS lookups and HTTP requests to arbitrary websites. This can be used to attack other systems that the application server can reach.

Technical detail

CWE-350 vulnerability enabling Server-Side Request Forgery (SSRF) through improper input validation in affected versions (10.4.1, 10.4.2, 11.0.0). Remote attacker can supply crafted payloads causing the application to perform unintended DNS queries and HTTP requests to arbitrary domains, potentially enabling lateral network attacks from the application server's network context.

Summary generated and translated by AI from the official description.
IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 is vulnerable to external service interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to arbitrary domain names. By submitting suitable payloads, an attacker can cause the application server to attack other systems that it can interact with. IBM X-Force ID: 220903.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected products
IBM · Cognos Controller
Related CVEs — IBM Cognos Controller

In the same product, most dangerous first.

CVE-2019-4176MEDIUMCVE-2019-4176EPSS 1.9%CVE-2019-4173MEDIUMCVE-2019-4173EPSS 1.8%CVE-2020-4876HIGHCVE-2020-4876EPSS 1.7%CVE-2020-4875HIGHCVE-2020-4875EPSS 1.7%CVE-2020-4879HIGHCVE-2020-4879EPSS 1.5%CVE-2020-4685HIGHCVE-2020-4685EPSS 1.4%