Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Plugin Framework for Java (PF4J)

Summary

IBM Watson Discovery Cartridge for IBM Cloud Pak for Data contains a vulnerable version of Plugin Framework for Java (PF4J). This bulletin identifies the steps to take to address the vulnerabilities.

Vulnerability Details

CVEID:CVE-2023-40828
**DESCRIPTION:**Plugin Framework for Java (PF4J) could allow a remote attacker to traverse directories on the system, caused by improper input validation by the expandIfZip method in the extract function. An attacker could use a specially crafted archive file containing “dot dot” sequences (/…/) to execute arbitrary code and obtain sensitive information.
CVSS Base score: 9.8
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/264671 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

CVEID:CVE-2023-40827
**DESCRIPTION:**Plugin Framework for Java (PF4J) could allow a remote attacker to traverse directories on the system, caused by improper input validation by the loadpluginPath parameter. An attacker could use a specially crafted archive file containing “dot dot” sequences (/…/) to execute arbitrary code and obtain sensitive information.
CVSS Base score: 9.8
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/264670 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

CVEID:CVE-2023-40826
**DESCRIPTION:**Plugin Framework for Java (PF4J) could allow a remote attacker to traverse directories on the system, caused by improper input validation by the zippluginPath parameter. An attacker could use a specially crafted archive file containing “dot dot” sequences (/…/) to execute arbitrary code and obtain sensitive information.
CVSS Base score: 9.8
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/264669 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

Affected Products and Versions

Remediation/Fixes

Upgrade to IBM Watson Discovery 4.8.2

<https://cloud.ibm.com/docs/discovery-data?topic=discovery-data-install&gt;

Workarounds and Mitigations

None