Supports the collection, integration and transformation of large volumes of data.

Main features: - Supports the collection, integration and transformation of large volumes of data, with data structures ranging from simple to highly complex.

New features, such as an operations console, an interactive debugger for parallel jobs, and support for balanced optimization, help customers work smarter, enhance productivity and accelerate problem resolution.

A program that allows streaming of content from one PC to another device.

Intended for use with Software Defined Radio (SDR) receivers.

This is a cost-effective solution for small marketing research companies.

Application that allows the submission of data files to a central server.

Please note that based on your settings, not all functions of the site may be available.

Furthermore, it also has multiple other vulnerabilities affecting the application.

Vendor Description IBM InfoSphere DataStage integrates data across multiple systems using a high performance parallel framework, and it supports extended metadata management and enterprise connectivity.

The scalable platform provides more flexible integration of all types of data, including big data at rest (Hadoop-based) or in motion (stream-based), on distributed and mainframe platforms.

Source: Business Recommendation Attackers are able to bypass authorization controls to execute system commands.

The vendor did not provide a patch but mitigation steps which have to be implemented.

Vulnerability Overview Description 1) Weak Authorization (CVE-2017-1467) The Administrator Client allows users with high priviledges to execute commands.

A low privileged application user can replay the same request and execute arbitrary commands on the server.

This happens because the application links to a single linux user in the backend server.

The application privileges are based on this system user irrespective of the user role of the application user.

Hence, any command can be executed by a low privileged application user in the backend OS, depending on the privileges of the linux user the application is using.

XML eXternal Entity (XXE) Injection (CVE-2017-1383) The Designer client allows users to import files in XML format.

DLL Preloading Dynamic Link Library (DLL) files are loaded from the applications home directory without being verified.

This may lead to execution of arbitrary files on the system as any users can replace the DLLs.

Loading Arbitrary Executables (CVE-2017-1468) The Director and Designer Client do not check for any file signatures before loading and executing other executable files.

Existing files can be replaced by any user with executable files, which will be executed from the toolbar.

Cleartext Passwords in Memory Dump (CVE-2017-1495) User credentials are stored in clear text within the memory which can be dumped to retrieve these credentials.

Proof Of Concept 1) Weak Authorization (CVE-2017-1467) Any command can be injected back to the Administrator Client to execute system commands.

Example: SH -c cat etcpasswd 2) XML External Entity Injection (XXE) (CVE-2017-1383) For example by importing the following XML code, arbitrary files can be read from the clients system.

The following code generates the connection request from the client system to attacker system.

Vulnerable Tested Versions The following version has been tested which was the most recent one when the vulnerabilities were discovered: IBM Infosphere Datastage 11.5 IBM states that the following products are also affected: IBM InfoSphere Information Server: versions 9.1, 11.3 and 11.5 IBM InfoSphere Information Server on Cloud: version 11.5.

Vendor also requested for more time to get back to us for some of the issues.

The vendor described mitigationsworkarounds for the vulnerabilities.

Workaround See the following URLs by the vendor for further details regarding mitigation steps: 1) Weak Authorization (CVE-2017-1467) 2) XML eXternal Entity (XXE) Injection (CVE-2017-1383) Update: 3) DLL preloading The vendor stated that the issue is resolved until 30th November 2017.

Loading Arbitrary Executables (CVE-2017-1468) 5) Cleartext Passwords in Memory Dump (CVE-2017-1495) ADVISORY URL EOF M.

Shah 2017.

Want to improve your own cyber security with the experts of SEC Consult Contact our local offices.

The company specializes in information security management, security audits, penetration testing, ISO 27001 certification support, cyber defense and secure software certification.

These include cookies that are necessary for the operation of the site and for the control of our commercial corporate goals, as well as those that are only used for anonymous statistical purposes, for convenience settings or to display personalized content.

Ibm Datastage 11.5 Download