Security Bulletin: Multiple security exposures in IBM Cognos BI Server (CVE-2014- 0416, CVE-2014-0423, CVE-2013-4322)

Vulnerability Details

CVE ID: CVE-2014-0416

DESCRIPTION: javax.security.auth.Subject is serializable but does not validate deserialized data properly. Malicious code could exploit this to construct an invalid Subject instance with content that differs from the advertised properties. In addition, if a server deserializes serialized data from untrusted sources, an attacker could insert an invalid instance of Subject class into a server Java process.
The fix ensures that serialized instances of Subject are deserialized correctly and safely.

CVSS:
CVSS Base Score: 5
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/90349 for the current score.
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:P/A:N)



CVE ID: CVE-2014-0423


DESCRIPTION: The DocumentHandler used by the java.beans.XMLDecoder implementation allows the use of external entities by default. This facilitates a variety of attacks via malicious XML data. The fix ensures that external entities are ignored by java.beans.XMLDecoder

CVSS:
CVSS Base Score: 5.5
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/90340 for the current score.
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:L/Au:S/C:P/I:N/A:P)



CVE ID: CVE-2013-4322


DESCRIPTION: Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 processes chunked transfer coding without properly handling (1) a large total amount of chunked data or (2) whitespace characters in an HTTP header value within a trailer field, which allows remote attackers to cause a denial of service by streaming data.
NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-3544.

CVSS:
CVSS Base Score: 5
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/91625 for the current score.
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:N/A:P)