IBM System Networking Switch Center up to 7.3.1.4 ZipDownload.jsp race condition

Summaryinfo

A vulnerability, which was classified as critical, has been found in IBM System Networking Switch Center up to 7.3.1.4. Affected is an unknown function of the file ZipDownload.jsp. The manipulation leads to race condition. This vulnerability is traded as CVE-2015-7820. There is no exploit available. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability was found in IBM System Networking Switch Center up to 7.3.1.4. It has been rated as critical. This issue affects an unknown functionality of the file ZipDownload.jsp. The manipulation with an unknown input leads to a race condition vulnerability. Using CWE to declare the problem leads to CWE-362. The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently. Impacted is confidentiality, and integrity. The summary by CVE is:

Race condition in the administration-panel web service in IBM System Networking Switch Center (SNSC) before 7.3.1.5 and Lenovo Switch Center before 8.1.2.0 allows remote attackers to obtain privileged-account access, and consequently provide ZipDownload.jsp input containing directory traversal sequences to read arbitrary files, via a request to port 40080 or 40443.

The weakness was shared 11/12/2015 (Website). It is possible to read the advisory at support.lenovo.com. The identification of this vulnerability is CVE-2015-7820 since 10/14/2015. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. Technical details of the vulnerability are known, but there is no available exploit.

By approaching the search of inurl:ZipDownload.jsp it is possible to find vulnerable targets with Google Hacking.

Upgrading to version 7.3.1.5 eliminates this vulnerability.Addressing this vulnerability is possible by firewalling 40080 / 40443. The best possible mitigation is suggested to be upgrading to the latest version.

The entries VDB-79196, VDB-79197 and VDB-79198 are related to this item. Be aware that VulDB is the high quality source for vulnerability data.

Affected

• IBM System Networking Switch Center 7.3.1.5
• Lenovo Switch Center before 8.1.2.0

Productinfo

Vendor

• IBM

Name

• System Networking Switch Center

Version

• 7.3.1.0
• 7.3.1.1
• 7.3.1.2
• 7.3.1.3
• 7.3.1.4

License

• commercial

Website

• Vendor: https://www.ibm.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion