Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8xx8-9g4g-c4q2

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

IBM Single Sign On for Bluemix could allow a remote attacker to obtain sensitive information, caused by a XML external entity (XXE) error when processing XML data by the XML parser. A remote attacker could exploit this vulnerability to read arbitrary files on the system or cause a denial of service.

IBM Single Sign On for Bluemix could allow a remote attacker to obtain sensitive information, caused by a XML external entity (XXE) error when processing XML data by the XML parser. A remote attacker could exploit this vulnerability to read arbitrary files on the system or cause a denial of service.

EPSS

Процентиль: 76%
0.00949
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-611

Связанные уязвимости

CVSS3: 9.1
nvd
около 9 лет назад

IBM Single Sign On for Bluemix could allow a remote attacker to obtain sensitive information, caused by a XML external entity (XXE) error when processing XML data by the XML parser. A remote attacker could exploit this vulnerability to read arbitrary files on the system or cause a denial of service.

EPSS

Процентиль: 76%
0.00949
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-611