IBM Cognos Analytics 11.0/11.1 Web Server HTTP Requests xml injection

Summaryinfo

A vulnerability classified as critical has been found in IBM Cognos Analytics 11.0/11.1. Impacted is an unknown function of the component Web Server. This manipulation as part of HTTP Requests causes xml injection. The identification of this vulnerability is CVE-2018-1721. It is possible to initiate the attack remotely. There is no exploit available.

Detailsinfo

A vulnerability was found in IBM Cognos Analytics 11.0/11.1 (Business Process Management Software). It has been declared as critical. Affected by this vulnerability is some unknown processing of the component Web Server. The manipulation as part of a HTTP Requests leads to a xml injection vulnerability. The CWE definition for the vulnerability is CWE-91. The product does not properly neutralize special elements that are used in XML, allowing attackers to modify the syntax, content, or commands of the XML before it is processed by an end system. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

IBM Cognos Analytics 11.0 and 11.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or cause the web server to make HTTP requests to arbitrary domains. IBM X-Force ID: 147369.

The weakness was shared 11/09/2019 (Website). The advisory is shared at exchange.xforce.ibmcloud.com. This vulnerability is known as CVE-2018-1721 since 12/13/2017. The exploitation appears to be easy. The attack can be launched remotely. Required for exploitation is a single authentication. Neither technical details nor an exploit are publicly available. The price for an exploit might be around USD $5k-$25k at the moment (estimation calculated on 02/11/2024). It is expected to see the exploit prices for this product increasing in the near future.MITRE ATT&CK project uses the attack technique T1505 for this issue.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The entries VDB-145273 and VDB-145282 are related to this item. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• Business Process Management Software

Vendor

• IBM

Name

• Cognos Analytics

Version

• 11.0
• 11.1

License

• commercial

Website

• Vendor: https://www.ibm.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion