ESB-2018.1007 - [Win][Linux] IBM Intelligent Operations Center: Provide misleading information - Remote/unauthenticated 2018-04-04

Printable version
PGP/GPG verifiable version

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

===========================================================================
             AUSCERT External Security Bulletin Redistribution

                               ESB-2018.1007
   A security vulnerability has been identified in WebSphere Application
   Server shipped with IBM Intelligent Operations Center (CVE-2017-1788)
                               4 April 2018

===========================================================================

        AusCERT Security Bulletin Summary
        ---------------------------------

Product:           IBM Intelligent Operations Center
Publisher:         IBM
Operating System:  Linux variants
                   Windows
Impact/Access:     Provide Misleading Information -- Remote/Unauthenticated
Resolution:        Patch/Upgrade
CVE Names:         CVE-2017-1788  

Reference:         ESB-2018.0875
                   ESB-2018.0847
                   ESB-2018.0807
                   ESB-2018.0791
                   ESB-2018.0291

Original Bulletin: 
   http://www.ibm.com/support/docview.wss?uid=swg22015262

- --------------------------BEGIN INCLUDED TEXT--------------------

Security Bulletin: A security vulnerability has been identified in WebSphere
Application Server shipped with IBM Intelligent Operations Center
(CVE-2017-1788)

Security Bulletin

Document information

More support for: IBM Intelligent Operations Center

Software version: 1.5, 1.5.0.1, 1.5.0.2, 1.6, 1.6.0.1, 1.6.0.2, 1.6.0.3, 5.1,
5.1.0.1, 5.1.0.2, 5.1.0.3, 5.1.0.4, 5.1.0.5, 5.1.0.6, 5.1.0.7, 5.1.0.8,
5.1.0.9, 5.1.0.10, 5.1.0.11, 5.1.0.12

Operating system(s): Linux, Windows

Reference #: 2015262

Modified date: 03 April 2018

Summary

IBM WebSphere Application Server is shipped with IBM Intelligent Operations
Center. Information about a security vulnerability affecting IBM WebSphere
Application Server has been published in a security bulletin.

Vulnerability Details

Consult the security bulletin, Security Bulletin: Potential spoofing attack in
WebSphere Application Server (CVE-2017-1788) ,  for vulnerability details and
information about fixes.

Affected Products and Versions

+----------------------------------------------+------------------------------+
|Principal Product and Versions                |Affected Supporting Products  |
+----------------------------------------------+------------------------------+
|IBM Intelligent Operations Center, Version    |IBM WebSphere Application     |
|1.5, or later                                 |Server V9.0 and Liberty       |
+----------------------------------------------+                              |
|IBM Intelligent Operations Center for         |                              |
|Emergency Management, Version 1.6, or later   |                              |
+----------------------------------------------+                              |
|IBM Intelligent Operations for Water, Version |                              |
|1.6.0, or later                               |                              |
+----------------------------------------------+                              |
|IBM Water Operations for Waternamics, Version |                              |
|5.1.0, or later                               |                              |
+----------------------------------------------+------------------------------+

Remediation/Fixes

Download the correct version of the fix from the following link: Security
Bulletin: Potential spoofing attack in WebSphere Application Server
(CVE-2017-1788). Installation instructions for the fix are included in the
readme document that is in the fix package.

Get Notified about Future Security Bulletins

Subscribe to My Notifications to be notified of important product support
alerts like this.

References

Related information

IBM Secure Engineering Web Portal
IBM Product Security Incident Response Blog

Change History

03 April 2018: Original Version Published

*The CVSS Environment Score is customer environment specific and will
ultimately impact the Overall CVSS Score. Customers can evaluate the impact of
this vulnerability in their environments by accessing the links in the
Reference section of this Security Bulletin.

Disclaimer

According to the Forum of Incident Response and Security Teams (FIRST), the
Common Vulnerability Scoring System (CVSS) is an "industry open standard
designed to convey vulnerability severity and help to determine urgency and
priority of response." IBM PROVIDES THE CVSS SCORES "AS IS" WITHOUT WARRANTY OF
ANY KIND, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A
PARTICULAR PURPOSE. CUSTOMERS ARE RESPONSIBLE FOR ASSESSING THE IMPACT OF ANY
ACTUAL OR POTENTIAL SECURITY VULNERABILITY.

                          Cross reference information
Segment       Product        Component Platform         Version         Edition
        IBM Intelligent                         1.6, 5.1, 5.1.0.2,
 Safer  Operations Center              Linux,   5.1.0.3, 5.1.0.4,
Planet  for Emergency                  Windows  5.1.0.6, 5.1.0.7
        Management
 Safer  IBM Intelligent                         1.6.1.1, 1.6.1, 1.6.0
Planet  Water
                                                5.1.0, 5.2.0, 5.2.0.1,
 Safer  IBM Water Operations           Linux    5.2.0.2, 5.2.0.3,
Planet  for Waternamics                         5.2.0.4, 5.2.0.5,
                                                5.2.0.6

- --------------------------END INCLUDED TEXT--------------------

You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.

NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members.  As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.

NOTE: This is only the original release of the security bulletin.  It may
not be updated when updates to the original are made.  If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.

Contact information for the authors of the original document is included
in the Security Bulletin above.  If you have any questions or need further
information, please contact them directly.

Previous advisories and external security bulletins can be retrieved from:

        https://www.auscert.org.au/bulletins/

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967
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=nRBm
-----END PGP SIGNATURE-----

« Back to bulletins