CVE-2020-14203 : Security Advisory and Response

WebFOCUS Business Intelligence 8.0 (SP6) is vulnerable to a Cross-Site Request Forgery (CSRF) attack that can impact administrative users.

Understanding CVE-2020-14203

What is CVE-2020-14203?

WebFOCUS Business Intelligence 8.0 (SP6) is susceptible to a CSRF attack targeting administrative users through the /ibi_apps/WFServlet(.ibfs) endpoint, potentially leading to the creation of an administrative user.

The Impact of CVE-2020-14203

The vulnerability can result in the unauthorized creation of administrative accounts and can be exploited in conjunction with CVE-2016-9044.

Technical Details of CVE-2020-14203

Vulnerability Description

The CSRF vulnerability in WebFOCUS Business Intelligence 8.0 (SP6) allows attackers to perform unauthorized actions on behalf of authenticated users.

Affected Systems and Versions

Product: WebFOCUS Business Intelligence 8.0 (SP6)
Vendor: Information Builders
Version: Not applicable

Exploitation Mechanism

The vulnerability can be exploited by tricking an authenticated user into executing malicious actions without their consent.

Mitigation and Prevention

Immediate Steps to Take

Implement CSRF tokens to validate and authenticate user requests.
Regularly monitor and review administrative user accounts for any unauthorized changes.

Long-Term Security Practices

Conduct regular security assessments and penetration testing to identify and address vulnerabilities.
Educate users on recognizing and avoiding CSRF attacks.

Patching and Updates

Apply security patches and updates provided by Information Builders to address the CSRF vulnerability in WebFOCUS Business Intelligence 8.0 (SP6).