IBM Cognos Controller 10.4.1/10.4.2/11.0.0 HTTP Request dns rebinding

Summaryinfo

A vulnerability was found in IBM Cognos Controller 10.4.1/10.4.2/11.0.0. It has been classified as problematic. Affected by this vulnerability is an unknown functionality of the component HTTP Request Handler. This manipulation causes dns rebinding. This vulnerability is registered as CVE-2022-22364. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability has been found in IBM Cognos Controller 10.4.1/10.4.2/11.0.0 and classified as problematic. Affected by this vulnerability is an unknown code block of the component HTTP Request Handler. The manipulation with an unknown input leads to a dns rebinding vulnerability. The CWE definition for the vulnerability is CWE-350. The product performs reverse DNS resolution on an IP address to obtain the hostname and make a security decision, but it does not properly ensure that the IP address is truly associated with the hostname. As an impact it is known to affect integrity. The summary by CVE is:

IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 is vulnerable to external service interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to arbitrary domain names. By submitting suitable payloads, an attacker can cause the application server to attack other systems that it can interact with. IBM X-Force ID: 220903.

The advisory is shared at ibm.com. This vulnerability is known as CVE-2022-22364 since 01/03/2022. The exploitation appears to be easy. The attack can be launched remotely. The exploitation doesn't need any form of authentication. Neither technical details nor an exploit are publicly available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 01/08/2025). MITRE ATT&CK project uses the attack technique T1583.002 for this issue.

Upgrading eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at X-Force (220903). Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• Business Process Management Software

Vendor

• IBM

Name

• Cognos Controller

Version

• 10.4.1
• 10.4.2
• 11.0.0

License

• commercial

Website

• Vendor: https://www.ibm.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion