Input validation error in Swagger UI - CVE-2018-25031

Vulnerability identifier: #VU64011

CSH Severity: Low

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-25031

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: Public exploit is available

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to insufficient validation of user-supplied input. A remote attacker can trick the victim into opening a specially crafted URL to display remote OpenAPI definitions.

Swagger UI
QRadar Pulse App
IBM Sterling Transformation Extender
IBM Concert Software
IBM Cloud Transformation Advisor
IBM IoT MessageSight
IBM WIoTP MessageGateway
IBM Tivoli Netcool Impact
IBM Rational Build Forge
IBM Cloud Pak for Business Automation
IBM Business Automation Workflow
IBM Cloud Pak for Multicloud Management Monitoring
IBM Fusion HCI
Qradar Advisor
IBM Sterling Partner Engagement Manager
IBM Rational ClearQuest
IBM i Modernization Engine for Lifecycle Integration
IBM Watson Machine Learning Accelerator
Rational Asset Analyzer
webMethods Designer Service Development
IBM Planning Analytics Workspace
IBM Edge Application Manager
IBM Copy Services Manager
IBM CICS TX Advanced
IBM CICS TX Standard
watsonx.data
IBM Cognos Controller
IBM InfoSphere Information Server

Install updates from vendor's website.

Swagger UI - update to 4.1.3
IBM Concert Software - update to 1.0.3
IBM i Modernization Engine for Lifecycle Integration - update to 1.0.1
QRadar Pulse App - update to 2.2.9
IBM Cloud Transformation Advisor - update to 3.1.0
IBM Watson Machine Learning Accelerator - update to 2.3.4
IBM WIoTP MessageGateway - update to 5.0.0.2
IBM Tivoli Netcool Impact - update to 7.1.0.25
IBM Rational Build Forge - update to 8.0.0.29
webMethods Designer Service Development - update to 11.1 Fix2
IBM Cloud Pak for Business Automation - addressed in versions 21.0.3.11, 22.0.1.1
IBM Business Automation Workflow - update to 22.0.1-IF002
IBM Planning Analytics Workspace - update to 2.0.83
watsonx.data - update to 2.1.1
IBM Cloud Pak for Multicloud Management Monitoring - update to 2.3 Fix Pack 7
IBM Fusion HCI - update to 2.6.1
Qradar Advisor - update to 2.6.4
IBM Sterling Partner Engagement Manager - addressed in versions 6.1.2.7, 6.2.0.5, 6.2.1.2
IBM Copy Services Manager - update to 6.3.2
IBM Rational ClearQuest - update to 10.0.3
IBM Cognos Controller - addressed in versions 10.4.1.0.15, 10.4.2.0.2
IBM InfoSphere Information Server - update to 11.7.1.4 Service pack 1

• Exploit #10746 - Swagger UI 4.1.3 - User Interface (UI) Misrepresentation of Critical Information (October 25, 2024)
• Exploit #9217 - CVE-2018-25031 (.json and .yaml files used to exploit CVE-2018-25031) (August 2, 2023)
• Exploit #8986 - SwaggerUI-CVE-2018-25031 (Exploit Swagger UI - User Interface (UI) Misrepresentation of Critical Information (CVE-2018-25031)) (April 16, 2023)

• https://github.com/swagger-api/swagger-ui/issues/4872
• https://github.com/swagger-api/swagger-ui/releases/tag/v4.1.3
• https://security.snyk.io/vuln/SNYK-JS-SWAGGERUI-2314885
• https://security.netapp.com/advisory/ntap-20220407-0004/

• Multiple vulnerabilities in IBM WIoTP MessageGateway/IoT MessageSight
• Multiple vulnerabilities in IBM CICS TX Standard
• Multiple vulnerabilities in IBM CICS TX Advanced
• Information disclosure in IBM Tivoli Netcool Impact
• Multiple vulnerabilities in IBM i Modernization Engine for Lifecycle Integration
• Multiple vulnerabilities in IBM Cloud Pak for Business Automation
• Multiple vulnerabilities in IBM Business Automation Workflow
• Multiple vulnerabilities in IBM QRadar Pulse for QRadar SIEM
• Multiple vulnerabilities in IBM Sterling Partner Engagement Manager
• Multiple vulnerabilities in IBM Planning Analytics Workspace
• Input validation error in IBM QRadar Advisor
• Multiple vulnerabilities in IBM Cloud Transformation Advisor
• Input validation error in IBM Edge Application Manager
• Multiple vulnerabilities in IBM InfoSphere Information Server
• Multiple vulnerabilities in IBM Copy Services Manager
• Multiple vulnerabilities in IBM Cognos Controller
• Multiple vulnerabilities in IBM Cloud Pak for Multicloud Management Monitoring
• Multiple vulnerabilities in IBM Storage Fusion and IBM Storage Fusion HCI
• Input validation error in IBM Rational ClearQuest
• Multiple vulnerabilities in Watson Machine Learning Accelerator on Cloud Pak for Data
• Multiple vulnerabilities in IBM Sterling Transformation Extender
• Multiple vulnerabilities in IBM Concert Software
• Multiple vulnerabilities in IBM watsonx.data
• IBM webMethods Designer Service Development update for Swagger UI
• Multiple vulnerabilities in IBM Rational Asset Analyzer (RAA)
• Multiple vulnerabilities in IBM Rational Build Forge