XML external entity (XXE) vulnerability in IBM InfoSphere Information Governance Catalog 11.3 before 11.3.1.2 and 11.5 before 11.5.0.1 allows remote authenticated users to read arbitrary files or cause a denial of service via crafted XML data. IBM X-Force ID: 110510.
References
Link | Resource |
---|---|
http://www-01.ibm.com/support/docview.wss?uid=swg21977152 | Patch Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/110510 | VDB Entry Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2018-03-12 21:29
Updated : 2024-02-04 19:46
NVD link : CVE-2016-0250
Mitre link : CVE-2016-0250
CVE.ORG link : CVE-2016-0250
JSON object : View
Products Affected
ibm
- infosphere_information_server
CWE
CWE-611
Improper Restriction of XML External Entity Reference